1920 matches found
CVE-2026-50483
CVE-2026-50483 affects Microsoft Graphics Component. The vulnerability is an information disclosure that allows a local, authorized attacker to access sensitive data, impacting confidentiality. The CVE is documented across multiple feeds (NVD, NCSC, CIRCL, etc.) with a Microsoft-provided update g...
CVE-2026-50484
CVE-2026-50484 is a Windows Kernel heap-based buffer overflow that enables local privilege escalation for an authenticated attacker. Public docs confirm the vulnerability and affected component as the Windows Kernel, with the impact described as local privilege elevation. Microsoft and MSRC have ...
CVE-2026-50485
CVE-2026-50485 is a Windows Hyper-V Denial of Service vulnerability caused by a buffer over-read. It can be exploited by an attacker who has adjacent network access to deny service on the target host, with high privileges required and no user interaction. The documented impact is availability los...
CVE-2026-54997
Public technical details are not provided in the supplied documents for CVE-2026-54997. No specifics on affected products, versions, root cause, or remediation are available here. Monitor for updates from official sources.
CVE-2026-56183
CVE-2026-56183 is a use-after-free vulnerability in the Windows MIDI Service Module that permits a locally authenticated attacker to achieve elevation of privileges. Affected component: Windows MIDI Service Module (CVE-2026-56183) with local attack vector and high impact (CVE described as Elevati...
CVE-2026-56648
CVE-2026-56648 is a Windows Network File System (NFS) server vulnerability described as a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized attacker to elevate privileges over the network. Public sources identify the root cause as a TOCTOU race in NFS and classify t...
CVE-2026-58638
CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...
CVE-2026-62786
CVE-2026-62786 is a Windows Win32K out-of-bounds read vulnerability that allows an authenticated, locally privileged attacker to disclose information. The CVE entry notes local attack vector with low privileges required and no user interaction, and a CVSSv3.1 base score of 5.5 (Medium). Public re...
CVE-2025-49660
Technical details about CVE-2025-49660 (affected product/component/version, root cause, impact, exploit status, or available patch) are not provided in the connected documents; monitor official disclosures for updates.
CVE-2025-53717
CVE-2025-53717 affects Windows Virtualization-Based Security (VBS) Enclave. Local privilege escalation can occur due to reliance on untrusted inputs in a security decision within the Enclave. Evidence: the CVE entry identifies the Enclave as the vulnerable component with a base CVSS v3.1 score of...
CVE-2025-55696
CVE-2025-55696 describes a time-of-check time-of-use (TOCTOU) race condition in the NtQueryInformation Token function (ntifs.h) that can allow a local, authorized attacker to elevate privileges. The connected Microsoft advisories indicate Windows updates addressing security vulnerabilities in Oct...
CVE-2025-60708
CVE-2025-60708 affects Storvsp.sys driver and, per the NC SC advisories, enables Denial-of-Service via an untrusted pointer dereference. The vulnerability is localized (requires local access) and relates to the Storvsp.sys component in Windows. The provided connected documents confirm the affecte...
CVE-2026-27922
CVE-2026-27922 is a vulnerability described as a use-after-free in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. The Red Hat/NVD entries confirm the same description. The connected documents do not enumerate affected product v...
CVE-2026-32090
CVE-2026-32090 affects the Windows Speech Brokered API. The vulnerability is an Elevation of Privilege with a CVSSv3.1 base score of 7.8 (HIGH). It is a LOCAL, LOW attack complexity, LOW privileges required, with no user interaction and UNCHANGED scope. The impact is HIGH for confidentiality, int...
CVE-2026-33099
Technical details (affected products, root cause, vulnerable components, or exploitation specifics) are not publicly provided in the supplied documents. Monitor for updates from sources like MSRC and the CVE record.
CVE-2026-40408
CVE-2026-40408 is described as a use-after-free in Windows kernel-mode drivers that enables local privilege escalation for an authenticated attacker. The provided documents consistently state local elevation of privileges but do not specify the affected products, driver components, or vulnerable ...
CVE-2026-50294
CVE-2026-50294 : Windows Kernel exposes sensitive system information to an unauthorized control sphere, enabling a local attacker to disclose information. Documents confirm a local attack vector with high confidentiality impact; no exploitation details or remediation are provided in the connected...
CVE-2026-50353
CVE-2026-50353 is a Windows DirectX kernel issue (DirectX Graphics Kernel) caused by a use-after-free in DirectX that enables a locally authenticated attacker to elevate privileges. The CVSS v3.1 base score is 7.8 (High) with LOCAL attack vector, LOW attack complexity, and NO user interaction req...
CVE-2026-50448
CVE-2026-50448 – Windows NTFS Heap-based Overflow (Windows NTFS): A local, heap-based buffer overflow in NTFS could allow an authenticated attacker to execute arbitrary code on the affected system. The CVE is documented as a local-execution vulnerability with a Microsoft-provided CVSS v3.1 base s...
CVE-2026-50491
The CVE-2026-50491 entry documents an out-of-bounds read in the Code Integrity DLL (ci.dll) that enables an authorized local attacker to achieve Elevation of Privileges. Affected component: Windows Code Integrity mechanism (ci.dll). Root cause: out-of-bounds read in ci.dll leading to privilege es...
CVE-2026-62724
CVE-2026-62724 is a local privilege escalation affecting the Windows Telephony Service due to a use-after-free. An authorized attacker can elevate privileges locally. Root cause: use-after-free in Telephony service code; impact: high (local elevation of rights) per CVSS 3.1; exploitability and ex...
CVE-2025-50174
CVE-2025-50174 is a use-after-free in the Windows Device Association Broker service that enables a local attacker to escalate privileges. Affected platforms include Windows OS versions addressed by KB5066835 (OS builds 26200.6899 and 26100.6899). Root cause: use-after-free in the broker service; ...
CVE-2025-53142
CVE-2025-53142 is a local privilege escalation in the Microsoft Brokering File System caused by a use-after-free condition. The issue affects Windows where an authorized attacker can elevate privileges locally. Microsoft has released fixes as part of the August 2025 updates (e.g., KB5064010 and r...
CVE-2025-54111
CVE-2025-54111 is documented in the connected materials with concrete details: it involves a use-after-free in Windows UI XAML Phone DatePickerFlyout that can allow an attacker to elevate privileges locally. The NCSC-2025-0277 listing assigns a high severity (CVSS ~7.8–7.8 range) to CVE-2025-5411...
CVE-2025-55335
CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...
CVE-2025-59196
CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...
CVE-2025-62470
CVE-2025-62470 is a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that enables a locally authenticated attacker to escalate privileges. The vulnerability affects the CLFS driver in Windows, with local access required and high impact on confidentiality, integrity, ...
CVE-2025-62573
CVE-2025-62573 is a DirectX Graphics Kernel elevation-of-privilege vulnerability described as a use-after-free in Windows DirectX that enables an authorized, local attacker to obtain elevated privileges. The EUVD and related advisories confirm the issue and map it to a Windows DirectX privilege e...
CVE-2026-21236
CVE-2026-21236 describes a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock (AFD) that enables an authenticated local attacker to obtain elevated privileges. The vulnerability is categorized as a local, privilege-escalation issue, with the affected component being t...
CVE-2026-25170
Technical details for CVE-2026-25170 are not publicly provided in the supplied documents. Monitor updates from Microsoft and national advisories for affected products, fixes, and confirmed impact.
CVE-2026-34343
CVE-2026-34343 describes a heap-based buffer overflow in Windows’ Application Identity (AppID) Subsystem that could enable local privilege escalation by an authorized attacker. Documented impact is local, with required privileges LOW and no user interaction, consistent with CVSS v3.1 base metrics...
CVE-2026-45636
The CVE-2026-45636 entries describe a heap-based buffer overflow in Windows NTFS that can allow an unauthenticated attacker to achieve local code execution. Affected software is Windows NTFS (filesystem driver). The underlying cause is a heap-based overflow; impact is high (CVE metrics show Local...
CVE-2026-49183
CVE-2026-49183 describes a race condition in Windows Clipboard Server due to improper synchronization, enabling a local attacker with low privileges to elevate to higher rights. The affected component is the Windows Clipboard Server (shared resource handling) and the root cause is concurrent exec...
CVE-2026-49801
The CVE-2026-49801 entry concerns Windows SMB: an uninitialized resource within SMB handling can lead to local information disclosure by an authorized user. The attack is described as local with low privileges required and no user interaction, and the impact targets confidentiality (information d...
CVE-2026-50371
CVE-2026-50371 affects Windows LUAFV (Windows LUAFV driver). The issue is a race condition due to concurrent access to a shared resource without proper synchronization, enabling an authorized local attacker to elevate privileges. Microsoft has released updates addressing this family of vulnerabil...
CVE-2026-50429
CVE-2026-50429 describes an out-of-bounds read in the Windows Kernel that may allow a remote attacker to disclose information over a network. The entry is tied to Microsoft’s Windows kernel information-disclosure vulnerability with a base CVSSv3.1 score of 8.2 (Network, Low attack complexity, No ...
CVE-2026-50431
Technical details are not publicly available in the provided documents. Monitor updates from Microsoft (MSRC) and advisories (NCSC, ZDI) for affected products, impact, and remediation related to CVE-2026-50431.
CVE-2026-50432
CVE-2026-50432 describes a Use-after-free vulnerability in the Windows Virtual Filtering Platform (VFP) . An authenticated attacker could trigger a denial-of-service condition over the network by exploiting this flaw in the VFP code path, as indicated by the CVE entry: AV:N/AC:H/PR:L/UI:N/S:U/C:N...
CVE-2026-50434
CVE-2026-50434 is a Windows Push Notifications information disclosure vulnerability. The entry describes exposure of sensitive data to an unauthorized actor, enabling disclosure locally. Key technical details from the provided documents: Affected component: Windows Push Notifications service in W...
CVE-2026-50489
CVE-2026-50489 is a heap-based buffer overflow in Windows Win32K that allows an authorized, locally authenticated attacker to escalate privileges. The root cause is a memory corruption in the Win32K subsystem that leads to code execution with SYSTEM rights. The CVE entry is supported by multiple ...
CVE-2026-56181
CVE-2026-56181 is a Windows Network Address Translation (NAT) spoofing vulnerability caused by an origin-validation error. It enables an adjacent-network attacker to impersonate a user on the NATed network, with high impact (code/privilege implications per report). Microsoft has released updates;...
CVE-2026-58545
CVE-2026-58545 is a Windows Kernel Security Feature Bypass vulnerability. The connected documents confirm an improper access control in the Windows Kernel that could let an authorized locally attacker bypass a security feature. Metrics indicate CVSS v3.1 base score 5.5 (Medium), with Local attac...
CVE-2026-59135
The CVE-2026-59135 entry describes a weakness in the Microsoft Windows Search Component where weak authentication could allow an authorized local attacker to disclose information. Affected software is Windows with the Windows Search Component implicated as the vulnerable element; root cause is we...
CVE-2026-62876
The CVE-2026-62876 vulnerability affects Windows Win32K, with an out-of-bounds read that allows an authorized, local attacker to elevate privileges. Affected component: Win32K (Windows). Root cause and impact are: local escalation to higher integrity/privilege with potential confidentiality, inte...
CVE-2026-65784
CVE-2026-65784 describes an out-of-bounds read in the Windows NTFS subsystem that allows an authorized local attacker to disclose information. The CVSS v3.1 base metrics assign a 5.5 (Medium) score with local attack vector , low attack complexity , and low privileges required , with no user inter...
CVE-2025-47993
CVE-2025-47993 — Microsoft PC Manager Elevation of Privilege An improper access control flaw in Microsoft PC Manager allows an authorized, locally present attacker to elevate privileges. Public advisories identify the vulnerable component as Microsoft PC Manager on Windows client systems and desc...
CVE-2025-55332
CVE-2025-55332 (Windows BitLocker security feature bypass) Affects Windows BitLocker. The vulnerability is described as Improper enforcement of behavioral workflow in Windows BitLocker that could allow an unauthorized attacker to bypass a security feature via a physical attack. Connected sources ...
CVE-2025-55339
CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...
CVE-2025-59194
CVE-2025-59194 is a Windows Kernel local privilege-escalation vulnerability (uninitialized resource) with a CVSS v3.1 base score of 7.0 (Local, High). Public exploits/POC exist (e.g., GitHub). Public advisories and MSRC/MSKB entries indicate Microsoft has released updates to address this vulnerab...
CVE-2025-59201
CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...