CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2026-69603

CVE-2026-69603 is a heap-based buffer overflow in Windows Hyper-V that allows an authorized local attacker to achieve code execution . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low privileges required, no user interaction, and changed scope leading to high impact on confident...

CVE-2024-38125

CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...

CVE-2024-43644

Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

CVE-2025-21370

CVE-2025-21370 is a Windows VBS Enclave Elevation of Privilege vulnerability. Public sources describe an input-validation error in the VBS Enclave that can allow privilege escalation on Windows 11 variants (22H2/23H2/24H2). Exploitation is reported publicly, and Microsoft has released updates (e....

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2026-61359

CVE-2026-61359 describes a heap-based buffer overflow in Windows Storage that enables an authorized, local attacker with low privileges and no user interaction to achieve elevation of privileges. The available documents (NVD, CVE listing) confirm the vulnerability and impact but do not provide ex...

CVE-2024-49124

According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-21372

Technical details about CVE-2025-21372 are not publicly provided in the connected documents. The materials reference Microsoft Brokering File System Elevation of Privilege vulnerability but do not specify affected products, root cause, versions, or fixes. Monitor for updates.

CVE-2025-27739

CVE-2025-27739 is a Windows Kernel elevation-of-privilege flaw described as an untrusted pointer dereference that enables a locally authenticated attacker to obtain SYSTEM privileges (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8). Connected sources confirm this CVE is tracked under Win...

CVE-2025-32720

CVE-2025-32720 is a Windows Storage Management Provider vulnerability described as an information disclosure via an out-of-bounds read. The connected NCSC advisory lists it under Windows Storage Management Provider with CVSS 5.50 (Impact: Access to sensitive data) and indicates a local attack vec...

CVE-2025-48807

CVE-2025-48807 affects Windows Hyper-V: improper restriction of communication to intended endpoints enables an authorized, local attacker to execute code. The CVE is tracked with a 3.1 3.1 CVSSv3.1 vector: Local, High impact on confidentiality, integrity, and availability; exploit requires Low pr...

CVE-2026-21525

CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2026-69819

CVE-2026-69819 is a CRITICAL (CVSS 3.1: 9.8) vulnerability in the Microsoft RPC Runtime Library , caused by an out-of-bounds write that allows an unauthenticated, remote attacker to execute arbitrary code over a network with no user interaction required. The attack vector is network-based with lo...

CVE-2024-43636

CVE-2024-43636 is a Win32k local elevation-of-privilege vulnerability with a CVSSv3.1 base score 7.8 (LOCAL, LOW PRIVILEGES, NO USER INTERACTION; impacts HIGH across confidentiality, integrity, and availability). CONNECTED documents confirm Windows OS components (Win32k) are affected and that Mic...

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.

CVE-2025-26674

CVE-2025-26674 is a Windows Media heap-based buffer overflow vulnerability that could allow an authorized, locally present attacker to execute code on the system. The CVE has a base score of 7.8 ( HIGH ) and is addressed by Microsoft security updates (e.g., KBs from the April 2025 cycle). See Mic...

CVE-2025-59509

CVE-2025-59509 affects Windows Speech, with the issue described as insertion of sensitive information into data sent by Windows Speech. The impact is local disclosure of information to an authorized attacker. The Connected documents confirm Windows-related fixes and hotpatch updates, but do not p...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...

CVE-2026-61367

The CVE-2026-61367 entry describes a local Privilege Escalation in Windows Remote Desktop Services caused by missing authentication for a critical function. An authorized attacker can elevate privileges locally (ATT&CK-style: Privilege Escalation) with a CVSSv3.1 base score of 7.8 (HIGH) and LOCA...

CVE-2024-37982

Technical details about CVE-2024-37982 are not provided in the connected documents. No specifics on affected components, root cause, or fixes are available here. Monitor official advisories/updates for authoritative guidance.

CVE-2024-38240

CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...

CVE-2024-43532

CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...

CVE-2025-21183

CVE-2025-21183 concerns Windows Resilient File System (ReFS) Deduplication Service. It is described as an Elevation of Privilege vulnerability that can be exploited locally (attack vector: LOCAL) with no user interaction, and is rated HIGH impact across confidentiality, integrity, and availabilit...

CVE-2025-21328

CVE-2025-21328 maps to a Windows MapUrlToZone security feature bypass vulnerability. Connected docs confirm affected component and root cause: bypassing security checks in MapUrlToZone, enabling circumvention of security measures. CVSS v3.1 base metrics shown as 4.3 (MEDIUM) with Network attack v...

CVE-2025-27491

CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...

CVE-2026-62713

CVE-2026-62713 : Heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Available documents identify the affected component as the Windows Cloud Files Mini Filter Driver, with a local attack vector and low privileges r...

CVE-2026-69496

CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...

CVE-2024-38045

Technical details about CVE-2024-38045 are not publicly provided in the supplied documents. References acknowledge a Windows TCP/IP remote code execution vulnerability but do not specify affected products, root cause, versions, or fixes; monitor for updates.

CVE-2024-49083

CVE-2024-49083 is a Windows Mobile Broadband Driver elevation-of-privilege vulnerability. The initial data identifies an attacker-controlled escalation with a CVSS v3.1 base score of 6.8 (Privileges Required: None, User Interaction: None, Attack Vector: Physical, Impact: High on confidentiality, ...

CVE-2025-21224

CVE-2025-21224 refers to a Windows Line Printer Daemon (LPD) Service remote code execution vulnerability. The primary connected sources indicate an attacker could exploit a network remote vector to achieve code execution with no user interaction, with a CVSSv3.1 base score of 8.1 (AV:N/AC:H/PR:N/...

CVE-2025-21228

CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...

CVE-2025-21308

CVE-2025-21308 Windows Themes Spoofing affects the Windows Theme system. The vulnerability lets a malicious party impersonate the user and potentially execute code in the victim’s context, requiring the victim to open/edit a rogue file. The impact is described as impersonation with potential code...

CVE-2025-21317

CVE-2025-21317 is a Windows Kernel Memory Information Disclosure vulnerability with CVSS 3.1/5.5 (LOCAL, LOW complexity, LOW privileges) and has the potential to expose confidential data from kernel memory. Connected documents confirm a Windows Kernel Memory Information Disclosure issue and indic...

CVE-2025-21409

CVE-2025-21409 is a Windows Telephony Service Remote Code Execution vulnerability exploitable over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this CVE entry and link it to Windows Telephony Service across Microsoft advisories; updates KB5050009, KB5050...

CVE-2025-29811

CVE-2025-29811 is a Windows vulnerability affecting the Windows Mobile Broadband Driver. It stems from improper input validation and enables an authorized local attacker to escalate privileges . The impact is local privilege escalation with potential elevation to higher privileges on the host. Th...

CVE-2025-33064

CVE-2025-33064 affects Windows Routing and Remote Access Service (RRAS). It is a heap-based buffer overflow that allows an authenticated attacker to execute code over the network. CVSS v3.1 base score 8.8 (HIGH). Affected component: RRAS on Windows. Root cause: heap-based overflow in RRAS handlin...

CVE-2026-62766

CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...

CVE-2024-38150

Technical details about CVE-2024-38150 are not provided in the connected documents. The Initial Description only notes a Windows DWM Core Library elevation vulnerability. Monitor for updates and new disclosures before assessing impact or remediation.

CVE-2024-38242

CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...

CVE-2024-43626

CVE-2024-43626 is a Windows Telephony Service Elevation of Privilege vulnerability. Affected: Windows operating systems where the Telephony Service component is present. Nature: local, low-privilege user could potentially elevate privileges (high impact to confidentiality, integrity, and availabi...

CVE-2024-43635

Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.