CVE-2026-58527

CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...

CVE-2026-61923

CVE-2026-61923 describes a heap-based buffer overflow in Windows Display Enhancement Service that could allow an authorized local attacker to elevate privileges. Documented impact is high for confidentiality, integrity, and availability; exploitation details, affected Windows versions, specific v...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62753

CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...

CVE-2025-47985

Technical details (affected component/version, root cause, exploitation) are not provided in the supplied documents. Monitor official advisories for updates and confirmed fixes.

CVE-2025-47986

CVE-2025-47986 : Affected software is the Windows Universal Print Management Service. The vulnerability is a use-after-free in that service, enabling an authorized attacker to achieve local privilege escalation. The CVE has a high impact (8.8/10) with local, privilege-related execution and a chan...

CVE-2025-48806

Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.

CVE-2025-49661

Technical details about CVE-2025-49661 (affected product/version, root cause, exploitability, or fix) are not provided in the connected documents; the supplied sources cover Windows KB/security updates but do not describe the CVE specifics.

CVE-2025-49680

CVE-2025-49680 affects the Windows Performance Recorder component. Root cause: improper link resolution before file access ("link following"). Impact: local Denial-of-Service by an authenticated user. Public details in connected documents confirm the vulnerability type and affected component, wit...

CVE-2025-50176

CVE-2025-50176 is a Windows graphics kernel RCE due to a type confusion in the DirectX/Graphics Kernel. Affected: core graphics components in Windows. Impact: local code execution with high confidentiality/integrity/availability risk (CVSS 3.1, 7.8). Public details in connected docs show Windows ...

CVE-2025-53805

CVE-2025-53805 affects Windows Internet Information Services (IIS) via an out-of-bounds read in HTTP.sys, enabling an unauthenticated attacker to deny service over the network. The vulnerability is categorized as Denial-of-Service with network attack vector and high severity (CVSS 7.5, NETWORK/NO...

CVE-2025-54916

CVE-2025-54916 is a Windows NTFS remote code execution vulnerability described as a stack-based overflow in NTFS. Connected sources confirm NTFS is affected and assign a high severity (CVSS ≈ 7.8). Public sources (including Krebs/NCSC) categorize this as an RCE issue for Windows NTFS, with exploi...

CVE-2025-55337

CVE-2025-55337 is a Windows BitLocker security feature bypass vulnerability. The description attributes the issue to improper enforcement of BitLocker’s behavioral workflow, allowing an attacker with physical access to bypass the protection and potentially access secured data. Public exploitation...

CVE-2025-55340

CVE-2025-55340 is a Windows Remote Desktop Protocol security feature bypass caused by improper authentication that can enable an authenticated local attacker to bypass a security feature. The vulnerability affects Windows Remote Desktop Protocol and is rated HIGH with a CVSSv3.1 vector of AV:L/AC...

CVE-2026-20844

CVE-2026-20844 is a Windows Clipboard Server use-after-free vulnerability that enables local privilege escalation. The linked Nessus/NVD/CVE data confirm the affected component is Windows Clipboard Server and that successful exploitation yields elevation of privileges. The issue is being addresse...

CVE-2026-20876

CVE-2026-20876 is a heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave that enables a locally authorized attacker to elevate privileges. The vulnerability targets the VBS Enclave component and can lead to total compromise of the host if exploited. Microsoft has publ...

CVE-2026-21237

Technical details of CVE-2026-21237 are not publicly provided in the supplied documents; no affected products, vulnerable components, or fixes are described here. Monitor for updates from official sources.

CVE-2026-25188

CVE-2026-25188 is a Windows Telephony Service heap-based buffer overflow that allows an attacker on an adjacent network to elevate privileges. The CVE entry cites an adjacent-network attack vector, low exploit complexity, and no user interaction, with high impact on confidentiality, integrity, an...

CVE-2026-26172

CVE-2026-26172 affects Windows Push Notifications. Root cause: concurrent execution on a shared resource with improper synchronization (race condition) leading to local privilege escalation by an authorized user. Impact per sources is elevation of privileges; exploitation status is not detailed i...

CVE-2026-27926

CVE-2026-27926 is a race-condition elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver. The issue allows an authorized, locally positioned attacker to escalate privileges via concurrent access to a shared resource. Public details confirm impact as local, with the CV...

CVE-2026-33839

Technical details for CVE-2026-33839 (affected product/component, root cause, impact, remediation) are not provided in the connected documents. Monitor for updates or consult primary sources for actionable vulnerability specifics.

CVE-2026-42973

Technical details (affected software, conditions, exploitability, and remediation) are not publicly available in the provided documents; monitor for updates.

CVE-2026-45598

CVE-2026-45598 is a Windows vulnerability in the Windows Ancillary Function Driver for WinSock described as a use-after-free that enables a local, authorized attacker to achieve privilege elevation . The description is consistent across the NVD entry and the CVE record, noting a LOCAL attack vect...

CVE-2026-48573

CVE-2026-48573 describes a protection mechanism failure in Windows Secure Boot allowing an authorized attacker to bypass a security feature locally. The NVD entry notes a local attack vector with high impact on confidentiality and integrity (C:H/I:H) and a CVSS v3.1 base score of 7.9. Connected d...

CVE-2026-50317

CVE-2026-50317 is a Windows OS elevation-of-privilege vulnerability described as a race condition in a shared resource that can be exploited locally by an authenticated attacker. Public details in connected documents confirm the affected product family as Windows operating systems and the root ca...

CVE-2026-50367

CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...

CVE-2026-50399

CVE-2026-50399 is a Windows Kernel elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows Kernel. The issue enables an authorized attacker to elevate privileges locally. According to the connected sources, the affected component is Windows Kernel, with a CVSS v3.1 bas...

CVE-2026-50463

CVE-2026-50463 is a Windows Kernel information-disclosure flaw (out-of-bounds read) that can be exploited remotely over a network to disclose data. The CVE is documented across NVD/EUVD and related feeds, and Microsoft has released updates (KB5099539/KB5099540 and MSRC page) addressing this vulne...

CVE-2026-50666

CVE-2026-50666 is a Windows Privilege Escalation vulnerability described as a use-after-free in the Windows Remote Access Connection Manager. The issue allows an authorized attacker to elevate privileges over a network. Public sources (NVD/NCSC/NVD-related) corroborate the impact and indicate Mic...

CVE-2026-58614

An out-of-bounds read in the Windows Kernel allows an authorized, local attacker to bypass a security feature. The CVE-2026-58614 entry notes a local vector with Privileges Required: Low and no user interaction, Confidentiality Impact: High, Impact on Availability/Integrity: none, giving a CVSS v...

CVE-2026-62722

The CVE-2026-62722 issue affects the Windows Bind Filter Driver and is caused by a heap-based buffer overflow, enabling an authorized local attacker to achieve privilege escalation. The provided sources confirm the vulnerability and its local, high-severity impact (CVE-2026-62722 with CVSS 3.1: A...

CVE-2026-62752

CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...

CVE-2026-65786

CVE-2026-65786 is a heap-based buffer overflow in Desktop Window Manager that allows an authorized local attacker to elevate privileges. Affected: Desktop Window Manager on Windows. Root cause: heap-based overflow in DWM. Impact: local privilege escalation with high confidentiality/integrity/avai...

CVE-2025-49675

Technical details (affected product, exploit specifics, root cause) are not provided in the connected documents. Monitor for official CVE disclosures and vendor advisories for concrete remediation and impact.

CVE-2025-49694

CVE-2025-49694 – Microsoft Brokering File System Elevation of Privilege. Description confirms a null pointer dereference that enables an authorized, local attacker to gain elevated privileges. CVSS v3.1 base score 7.8 ( HIGH ); attack vector LOCAL, privileges required LOW, user interaction NONE, ...

CVE-2025-55236

Technical details for CVE-2025-55236 are not provided in the connected documents. Monitor for updates (no vendor/version/root-cause/fix details in the supplied sources).

CVE-2025-58733

CVE-2025-58733 corresponds to a use-after-free in Inbox COM Objects on Windows that enables local code execution. Connected sources confirm Inbox COM Objects as the vulnerable component and describe the impact as arbitrary code execution by a local attacker. Public advisories from Microsoft and C...

CVE-2026-20864

CVE-2026-20864 describes a heap-based buffer overflow in the Connected Devices Platform Service (Cdpsvc) on Windows that enables an authorized local attacker to elevate privileges. The vulnerability affects Cdpsvc and is rated high (CVSS v3.1 base 7.8; Local, Low Attack Complexity, Privileges Req...

CVE-2026-20923

CVE-2026-20923 is a use-after-free in Windows Management Services that allows an authorized, locally situated attacker to elevate privileges. Evidence from Nessus/NVD/CVE records shows this CVE is associated with Windows Management Services and is listed among January 2026 security updates. Remed...

CVE-2026-25179

CVE-2026-25179 affects the Windows Ancillary Function Driver for WinSock and is caused by improper validation of a specified input type, enabling a locally authenticated attacker to elevate privileges. The entry carries a CVSS v3.1 base score of 7.0 (High) with Local attack, High confidentiality/...

CVE-2026-26184

CVE-2026-26184 is a Buffer over-read in the Windows Projected File System that can enable local privilege elevation for an authenticated user. Connected sources confirm it is tracked under Windows Projected File System and that Microsoft has released security updates to fix vulnerabilities in Win...

CVE-2026-27927

CVE-2026-27927 is a Windows Projected File System vulnerability described as a race condition due to concurrent execution on a shared resource, enabling an authorized local attacker to elevate privileges. Connected sources (Microsoft MSRC, Red Hat, Netherlands NCSC) corroborate the Windows Projec...

CVE-2026-32222

CVE-2026-32222 is a Windows Win32k elevation-of-privilege vulnerability. The provided data indicate a local exploit path with LOW privileges required and NO user interaction, potentially compromising confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 7.8 (HIGH) wi...

CVE-2026-35417

CVE-2026-35417 describes a type confusion vulnerability in Windows Win32K — ICOMP, where an attacker with local access could elevate privileges. The initial description states an authorized user can benefit locally, indicating a local privilege escalation with high impact (CVSS v3.1 base score 7....

CVE-2026-40406

Technical details about CVE-2026-40406 are not publicly available in the provided documents; monitor for updates as additional specifics (affected products, root cause, fixes) may be released.

CVE-2026-48563

CVE-2026-48563 describes a heap-based buffer overflow in the Remote Desktop Client that enables an unauthenticated attacker to execute code over the network. The accompanying metrics indicate a high-severity impact (CVSS 3.1 base score 7.5) with attacker control over network access, requiring use...

CVE-2026-49184

The CVE-2026-49184 entry describes a heap-based buffer overflow in Windows NTFS that allows a local attacker to execute code. Affected component: Windows NTFS subsystem; root cause is a heap-based overflow. Impact: local code execution with high severity (CVSSv3.1 base score 8.4). No specific pat...

CVE-2026-50391

CVE-2026-50391 is a Microsoft Windows Group Policy privilege-escalation vulnerability. Affects Windows Group Policy functionality; root cause is improper privilege management that permits an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.8 (High) with local, low attack co...

CVE-2026-50433

CVE-2026-50433 (Windows Media) is a use-after-free vulnerability in Windows Media that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free error. Impact: local privilege escalation with high severity (CVSS 3.1 base score 7....

CVE-2026-50482

CVE-2026-50482 : Heap-based buffer overflow in Windows NTFS can allow a locally authenticated attacker to execute code. Exploitation requires local access with low privileges and user interaction, per the CVE metrics (AV:L, PR:L, UI:R). Public references indicate Microsoft has released updates to...