CVE-2026-49183

CVE-2026-49183 describes a race condition in Windows Clipboard Server due to improper synchronization, enabling a local attacker with low privileges to elevate to higher rights. The affected component is the Windows Clipboard Server (shared resource handling) and the root cause is concurrent exec...

CVE-2026-20804

CVE-2026-20804 concerns an issue in Windows Hello where an incorrect privilege assignment can enable a local attacker to tamper with biometric authentication locally. The entry identifies the affected area as Windows Hello and the root cause as a privilege/permission misassignment, resulting in p...

CVE-2026-26169

CVE-2026-26169 is a Windows Kernel Memory information-disclosure vulnerability described as a buffer over-read that can leak information to an authorized local attacker. The CVE is listed across multiple feeds (NVD/NCSC/EUVD) with the impact described as local information disclosure and a high co...

CVE-2026-34331

CVE-2026-34331 involves a race condition in the Windows Win32K GRFX subsystem caused by concurrent access to a shared resource with improper synchronization. This leads to local privilege escalation by an authorized attacker. The provided documents state the issue and impact but do not include ex...

CVE-2026-34344

Technical details about CVE-2026-34344 are not publicly provided in the supplied connected documents. The available descriptions are generic; monitor for official disclosures, patches, and affected products in subsequent updates.

CVE-2026-34349

CVE-2026-34349 describes a local information disclosure in Windows Media where sensitive data is exposed to an unauthorized actor, potentially enabling a local attacker with low privileges and no user interaction to disclose information. The report notes a CVSSv3.1 base score of 5.5 (Medium), wit...

CVE-2026-42907

Technical details (affected software, component, root cause, impact and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-45593

CVE-2026-45593 is a use-after-free vulnerability in the Windows SDK that allows an authorized attacker to elevate privileges locally. The NVD/CVE entries describe that the underlying issue is a use-after-free in Windows SDK code leading to local privilege escalation with a CVSS v3.1 base score of...

CVE-2026-50300

CVE-2026-50300 is an integer underflow in Windows Kernel (and related Windows components such as DWM Core Library per CVE listings) that enables an authorized local attacker to disclose information. The entry specifies a local attack vector with low privileges and no user interaction, causing a c...

CVE-2026-50309

CVE-2026-50309 is a Windows NTFS heap-based buffer overflow that could allow an authorized, local attacker to execute code. Public details consistently describe the vulnerability in Windows NTFS, with the impact stated as local code execution. Microsoft has released updates addressing this vulner...

CVE-2026-50345

CVE-2026-50345 corresponds to a race condition in Windows Runtime (concurrent execution with improper synchronization) that allows an authorized attacker to perform local privilege escalation. The entry lists the vulnerability as a Windows Runtime elevation-of-privilege issue with CVSSv3.1 base m...

CVE-2026-50422

CVE-2026-50422 is a Windows NTFS vulnerability described as an out-of-bounds read that could let an authenticated, local attacker gain elevated privileges. Affected component: Windows NTFS (NTFS subsystem). Root cause: out-of-bounds read in NTFS code path. Impact: local privilege escalation and p...

CVE-2026-50697

The CVE-2026-50697 entry concerns a vulnerability in the Windows Common Log File System Driver that could allow an attacker with local access to elevate privileges. The issue is described as exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public de...

CVE-2026-56643

CVE-2026-56643 is a DirectX Graphics Kernel elevation of privilege vulnerability tracked by Microsoft. It stems from a use-after-free in the Windows Kernel’s DirectX Graphics Kernel component, enabling a local attacker with normal privileges to escalate to higher privileges. The vulnerability is ...

CVE-2026-59135

The CVE-2026-59135 entry describes a weakness in the Microsoft Windows Search Component where weak authentication could allow an authorized local attacker to disclose information. Affected software is Windows with the Windows Search Component implicated as the vulnerable element; root cause is we...

CVE-2026-65774

CVE-2026-65774 : Heap-based buffer overflow in the Windows Installer component allows an authorized, local attacker to elevate privileges. The issue is described as a local, low-attack-complexity vulnerability with high impact on confidentiality, integrity, and availability. No exploitation detai...

CVE-2026-65784

CVE-2026-65784 describes an out-of-bounds read in the Windows NTFS subsystem that allows an authorized local attacker to disclose information. The CVSS v3.1 base metrics assign a 5.5 (Medium) score with local attack vector , low attack complexity , and low privileges required , with no user inter...

CVE-2025-53147

CVE-2025-53147 refers to a local privilege escalation in the Windows Ancillary Function Driver for WinSock caused by a use-after-free condition. The CVSS vector indicates a local, high-privilege impact with “LOW” privileges required and no user interaction, consistent with an attacker who already...

CVE-2025-53151

CVE-2025-53151 is a Windows Kernel use-after-free local privilege escalation vulnerability. Connected sources indicate the affected component is the Windows Kernel and that exploitation leads to obtaining elevated privileges locally. Microsoft security updates are referenced in the surrounding ad...

CVE-2025-53768

CVE-2025-53768 corresponds to an Xbox-related vulnerability in the IStorageService component, described as a use-after-free that enables an authorized attacker to elevate privileges locally. The connected NCSC advisory references this CVE as an Xbox issue with impact class “Obtaining Increased Ri...

CVE-2025-53800

CVE-2025-53800 is a local privilege escalation in the Microsoft Graphics Component. The Initial Description notes privilege elevation for an authorized attacker, but does not provide technical details on the vulnerable subcomponent, root cause, affected versions, exploit vectors, or exact impact ...

CVE-2025-54094

CVE-2025-54094 is a local privilege escalation in the Windows Defender Firewall Service caused by a type confusion vulnerability. The connected documents confirm the affected component as Windows Defender Firewall Service and the impact as obtaining elevated privileges on the local machine. The s...

CVE-2025-55678

CVE-2025-55678 : A use-after-free in Windows DirectX enables an authenticated local attacker to achieve elevated privileges. The connected EUVD entry confirms this description. No concrete affected builds, exploit details, or patch/version information are provided in the supplied documents. Remed...

CVE-2025-58728

CVE-2025-58728 is a Windows Bluetooth Service use-after-free elevation-of-privilege vulnerability. Connected documents corroborate a local, privilege-escalation impact (CVSS-like note: 7.8 HIGH, local access, no user interaction). The NCSC data lists CVE-2025-58728 under Windows Bluetooth Service...

CVE-2025-58736

CVE-2025-58736 is a use-after-free in Windows Inbox COM Objects that enables local code execution by an attacker who can interact with the affected system. CVSS v3.1: AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H; Privileges: None, User Interaction: Required, with high impact on confidentiality/ integrity/...

CVE-2025-59189

CVE-2025-59189 is a local privilege-escalation in Microsoft Brokering File System (Windows). Description: use-after-free in the Brokering File System allows a non-remote, local attacker to escalate privileges. The patched fix is included in the October 2025 Windows security update KB5066835 (OS B...

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

CVE-2025-62466

CVE-2025-62466 : Windows Client-Side Caching (CSC) Service contains a null pointer dereference vulnerability that allows an authenticated local attacker to escalate privileges . The issue is tied to CSC on Windows and is listed in multiple advisories as a privilege-elevation vulnerability affecti...

CVE-2026-20831

The CVE-2026-20831 entry corresponds to a TOCTOU race condition in Windows Ancillary Function Driver for WinSock that could allow a local, authenticated attacker to elevate privileges. The description in the initial document confirms local privilege escalation as the impact. Connected documents i...

CVE-2026-20919

CVE-2026-20919 is a race-condition vulnerability in Windows SMB Server that allows an authorized network attacker to elevate privileges. The issue concerns concurrent access to a shared resource without proper synchronization. Public documentation in the connected sources confirms Windows SMB Ser...

CVE-2026-21244

CVE-2026-21244 affects Windows Hyper-V with a heap-based buffer overflow that enables local code execution by an authenticated attacker. The CVSS 3.1 vector ( LOCAL, LOW PR, LOW AC, USER INTERACTION REQUIRED, S: U ) indicates high impact to confidentiality, integrity, and availability if exploite...

CVE-2026-21253

CVE-2026-21253 is a Windows vulnerability in the Mailslot File System described as a use-after-free issue that can enable local privilege escalation. The CVE’s CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high attack complexity, and requires low privileges and no user interaction. The...

CVE-2026-25169

Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-42968

CVE-2026-42968 describes an out-of-bounds read vulnerability in Windows Telephony Service that allows an authorized, local attacker to disclose information. Root cause: bound-checking deficiency in the Telephony Service component. Impact: confidentiality impact high with local access and no user ...

CVE-2026-50318

CVE-2026-50318 affects the Windows Resilient File System (ReFS). It describes a stack-based buffer overflow that allows an authorized local attacker to elevate privileges. The CVSSv3.1 vector is LOCAL/LOW+LOW/LOW with no user interaction and implies high impact on confidentiality, integrity, and ...

CVE-2026-50327

CVE-2026-50327 is a heap-based buffer overflow in Windows Media that could allow an authorized attacker to execute code locally. Affected components are Windows Media/Windows Media Foundation. The root cause is a heap-based buffer overflow. Mitigation: apply the Microsoft security updates; the CV...

CVE-2026-50335

CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...

CVE-2026-50354

CVE-2026-50354 involves a use-after-free in the Windows Kernel that enables an authorized local attacker to elevate privileges. The affected source is the Windows Kernel; the vulnerability stems from memory management misuse leading to arbitrary code execution with SYSTEM-level privileges. Exploi...

CVE-2026-50359

CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...

CVE-2026-50388

CVE-2026-50388 is an Windows NTFS local vulnerability described as an out-of-bounds read that allows an unauthenticated/unauthorized attacker to execute code locally. The CVE is tracked across multiple sources (NVD, MSRC, CIRCL) with a base CVSS v3.1 score of 7.8 (High) and LOCAL attack vector, r...

CVE-2026-50394

CVE-2026-50394 is an information-disclosure vulnerability affecting Windows Media, enabling a locally-initiated disclosure of sensitive data to an authorized attacker. The incident is categorized as a local access issue with a CVSS v3.1 score of 5.5 (Medium) and a Confidentiality impact of High; ...

CVE-2026-50398

CVE-2026-50398 (Windows Media) : A race condition in concurrent execution with a shared resource allows an authorized attacker to elevate privileges over the network. The issue affects Windows Media components as described in the entry and is rated with CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2026-50400

CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...

CVE-2026-50441

An active CVE: CVE-2026-50441 affects Windows Resilient File System (ReFS). Description confirms an Untrusted pointer dereference leading to local Privilege Escalation by an authorized attacker. Impact per CVSS: Local, Privilege Elevation, with High confidentiality/integrity/availability impact. ...

CVE-2026-50450

CVE-2026-50450 describes a race condition in Windows Wireless Wide Area Network Service where concurrent execution on a shared resource with improper synchronization can allow an authenticated, local attacker to elevate privileges. The CVE is associated with a local exploit vector and a base CVSS...

CVE-2026-50453

CVE-2026-50453 affects the Windows USB Audio Class driver (usbaudio.sys). It is an out-of-bounds read vulnerability that may disclose information and requires physical access (attack vector: physical, base CVSS 6.1). Root cause: memory read past bounds. Impact: information disclosure with a physi...

CVE-2026-50459

CVE-2026-50459 is a Windows Kernel elevation of privilege vulnerability described as a use-after-free in the Windows kernel that could allow a local attacker to elevate privileges. Public references in the connected documents indicate Microsoft has released updates to address this vulnerability (...

CVE-2026-50461

CVE-2026-50461 is a Windows NTFS heap-based buffer overflow vulnerability that allows a local attacker to execute code. The issue is linked to the NTFS subsystem, enabling arbitrary code execution with high impact (Local, Requires User Interaction, Privilege: None). Public records in NVD/EUVD/NCS...

CVE-2026-50469

CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...