CVE-2025-59289

CVE-2025-59289 concerns a double-free condition in Windows Bluetooth Service enabling a locally authenticated attacker to elevate privileges. Public sources within the provided documents confirm this CVE is associated with the Windows Bluetooth Service and is categorized with a high impact (local...

CVE-2025-60704

Technical details about CVE-2025-60704 are not publicly provided in the supplied Connected Documents. The initial description notes a Kerberos cryptographic step missing that could enable network-based privilege elevation, but no vendor/version/impact specifics are disclosed here. Monitor for upd...

CVE-2025-60709

Technical details (affected product/version, root cause, impact, exploit specifics) are not publicly provided in the given documents for CVE-2025-60709. Monitor for updates from Microsoft; no additional vulnerability specifics are available here.

CVE-2026-20825

CVE-2026-20825 is a Windows Hyper-V information-disclosure vulnerability described as “improper access control” that can allow an authorized local attacker to disclose information. The CVE is rated with local attack vector, high privilege requirement, and high confidentiality impact (CVSS: 4.4, M...

CVE-2026-20828

CVE-2026-20828 is an out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS). The impact is information disclosure and requires physical access (attack vector: PHYSICAL; base score 4.6). Affected: Windows ICS component within Windows. Root cause: out-of-bounds read as descri...

CVE-2026-23671

CVE-2026-23671 is a Windows Bluetooth RFCOM Protocol Driver elevation of privilege vulnerability. A locally exposed issue could allow an attacker with low privileges and no user interaction to escalate privileges via the Bluetooth stack’s RFCOM Protocol Driver; exploitation maturity is UNPROVEN. ...

CVE-2026-25169

Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.

CVE-2026-27930

CVE-2026-27930 is a Windows GDI information disclosure vulnerability. The CVSSv3.1 base score is 5.5 (Medium); attack is LOCAL, requires user interaction, and does not affect integrity or availability, but threatens confidentiality HIGH. The record notes an OFFICIAL_FIX remediation level, implyin...

CVE-2026-32154

CVE-2026-32154 is a Desktop Window Manager elevation of privilege vulnerability. AFFECTED COMPONENT: Desktop Window Manager (Windows). The CVSS v3.1 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; exploitation is local, with LOW privileges required and no user interactio...

CVE-2026-50311

CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...

CVE-2026-50390

CVE-2026-50390 is a Windows Kernel elevation-of-privilege in which an authorized attacker can gain local privileges through a type-confusion vulnerability (incompatible resource type). The CVE is documented with a CVSSv3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, BASE SCORE 7.0 (HIGH). Affe...

CVE-2026-50401

CVE-2026-50401 describes an information disclosure in the Windows Cloud Files Mini Filter Driver due to an out-of-bounds read. The impact is local and depends on the attacker already having some level of privileges, with a high confidentiality impact reported in the CVE; the advisory notes an aut...

CVE-2026-50404

CVE-2026-50404 affects Windows Media: a race condition in a shared resource allows local privilege escalation by an authorized user. The root cause is concurrent execution with improper synchronization. Impact is local elevation of privileges; exploitation status is not provided in the documents....

CVE-2026-50445

CVE-2026-50445 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by a buffer over-read. An unauthenticated, remote attacker could disclose memory information over the network. Microsoft and partners have released updates (MSRC guidance) to address this vulnera...

CVE-2026-50673

CVE-2026-50673 is a Windows Kernel elevation-of-privilege vulnerability caused by a null pointer dereference. The issue allows an authorized attacker to elevate privileges locally. Public sources confirm details across NVD, MSRC, EUVD, and related advisories, with a CVSSv3.1 vector of LOCAL, HIGH...

CVE-2026-57982

CVE-2026-57982 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by the use of an uninitialized resource. An authenticated attacker could disclose information over the network. Public details identify the affected component as Windows RDP/RDP client-server int...

CVE-2026-62796

The CVE CVE-2026-62796 describes an out-of-bounds read in Windows NTFS that can let an authorized, low-privilege attacker disclose information locally. The defined attack vector is LOCAL with LOW complexity and no user interaction, and the impact is a confidentiality breach (information disclosed...

CVE-2025-48813

Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.

CVE-2025-50152

CVE-2025-50152 is a Windows Kernel vulnerability (Out-of-bounds read) that could enable an authorized local attacker to elevate privileges. The initial record lists the CVE with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL attack vector/low complexity, with no exploitation details. Connected do...

CVE-2025-53134

Technical details about CVE-2025-53134 are not publicly disclosed in the provided Connected documents. Available sources confirm the vulnerability description only (race condition in Windows Ancillary Function Driver for WinSock with local privilege escalation). Monitor for updates.

CVE-2025-53151

CVE-2025-53151 is a Windows Kernel use-after-free local privilege escalation vulnerability. Connected sources indicate the affected component is the Windows Kernel and that exploitation leads to obtaining elevated privileges locally. Microsoft security updates are referenced in the surrounding ad...

CVE-2025-53716

CVE-2025-53716 is a Denial-of-Service vulnerability due to a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS). The CVE description states an authorized attacker can trigger a network-based DoS without user interaction, with attack vector NETWORK and impact Av...

CVE-2025-53721

Technical details are not publicly available in the provided connected documents. The CVE is described as a use-after-free in Windows Connected Devices Platform Service enabling local privilege elevation, but specifics (root cause, affected versions, exploit method, and fix) are not disclosed her...

CVE-2025-53809

CVE-2025-53809 affects Windows Local Security Authority Subsystem Service (LSASS). The issue is an improper input validation in LSASS that enables an authenticated attacker to trigger a network-based Denial of Service. Public exploitation is listed by threat intel sources. The fix is included in ...

CVE-2025-55325

CVE-2025-55325 is a Buffer over-read in the Windows Storage Management Provider that enables an attacker with local access to disclose information. The CVE entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low attack complexity; confidentiality impact is High, others...

CVE-2025-55333

CVE-2025-55333 describes an authentication bypass in Windows BitLocker caused by an incomplete factor comparison, enabling a physical attacker to bypass a security feature. The initial entry notes exploitation status as null and does not specify affected product versions beyond Windows BitLocker;...

CVE-2025-55676

CVE-2025-55676 affects the Windows USB Video Class System Driver and is an information disclosure vulnerability that can be exploited locally on an authenticated system. The root cause is an error message generation that reveals sensitive information from the Windows USB Video Driver. Microsoft’s...

CVE-2025-58714

CVE-2025-58714 is an elevation-of-privilege issue in the Windows Ancillary Function Driver for WinSock caused by improper access control. The description indicates an authorized attacker could locally elevate privileges. Connected Microsoft advisories (KB/OS update pages) show this CVE among Wind...

CVE-2025-59255

CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...

CVE-2026-20815

CVE-2026-20815 is a race condition in the Capability Access Management Service (camsvc) that allows a locally authenticated user to elevate privileges. The vulnerability arises from concurrent execution on a shared resource with improper synchronization. Microsoft and multiple security bulletins ...

CVE-2026-20832

CVE-2026-20832 is a Windows component vulnerability described as a Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege. Connected documents confirm the flaw affects the Windows RPC IDL handling, enabling local privilege escalation with high impact. The vulnera...

CVE-2026-20863

CVE-2026-20863 is a local privilege escalation in Windows Win32K (ICOMP) caused by a double-free condition. Exploitable by an authorized local attacker with LOW privileges and no user interaction, leading to SYSTEM-level access as described in multiple feeds. Connected documents confirm a Win32K ...

CVE-2026-21221

CVE-2026-21221 maps to a race-condition in the Capability Access Management Service (camsvc) that allows a locally authenticated attacker to obtain elevated privileges. The root cause is concurrent execution with improper synchronization on a shared resource. The vulnerability is associated with ...

CVE-2026-24295

CVE-2026-24295 concerns the Windows Device Association Service Elevation of Privilege. The entry indicates a LOCAL attack with LOW privileges required and NO user interaction, leading to HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH). The vulne...

CVE-2026-32070

CVE-2026-32070 affects Windows where the Common Log File System Driver contains an elevation-of-privilege flaw. The root cause is not explicitly described in the provided text, but the CVSS 3.1 metrics indicate a local attack vector with high impact on confidentiality, integrity, and availability...

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-34331

CVE-2026-34331 involves a race condition in the Windows Win32K GRFX subsystem caused by concurrent access to a shared resource with improper synchronization. This leads to local privilege escalation by an authorized attacker. The provided documents state the issue and impact but do not include ex...

CVE-2026-45596

The CVE-2026-45596 entry concerns a use-after-free in the Windows Ancillary Function Driver for WinSock, leading to local privilege elevation. Affected component/function is the Windows AFD for WinSock; root cause is a use-after-free condition that can be exploited by an authorized local attacker...

CVE-2026-50315

CVE-2026-50315 is a Windows Image Acquisition vulnerability described as a null pointer dereference that allows an authorized, local attacker to achieve privilege escalation. The entry notes a CVSSv3.1 base score of 7.8 (High), with local attack vector, low attack complexity, required privileges,...

CVE-2026-50374

CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...

CVE-2026-50393

CVE-2026-50393 is a Windows kernel-mode driver use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry is supported by multiple sources in connected documents, including NVD/MSRC summaries. Affected component: Windows Kernel-Mode Drivers (kernel s...

CVE-2026-50410

CVE-2026-50410 is a Windows Runtime use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. Multiple connected sources confirm the issue affecting Windows Runtime and describe local privilege escalation as the impact, with CVSS v3.1 score of 7.0 (HIGH) and L...

CVE-2026-50492

CVE-2026-50492 describes a heap-based buffer overflow in the Windows Resilient File System (ReFS) that allows an unauthorized attacker to achieve remote code execution with a physical attack. The connected sources corroborate ReFS as the affected component and frame the impact as remote code exec...

CVE-2026-50501

CVE-2026-50501 is a Windows ReFS (Resilient File System) vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code. The CVE is associated with a high impact (CVSS v3.1 base score 7.8, Local attack, no privileges, user interaction required) and is tracke...

CVE-2026-50689

CVE-2026-50689 – Windows Clipboard Server suffers a use-after-free in the Clipboard Server that enables a local, authorized attacker to elevate privileges. The CVSS 3.1 vector shows a local, low-privilege exploit with no user interaction and high confidentiality, integrity, and availability impac...

CVE-2026-54107

The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...

CVE-2026-54112

CVE-2026-54112 affects Windows Win32K. The issue is a race condition caused by concurrent execution on a shared resource due to improper synchronization, enabling a locally authenticated user to elevate privileges. The base score is 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges an...

CVE-2026-54126

CVE-2026-54126 is a Windows RDP information-disclosure vulnerability (out-of-bounds read). It is triggered over the network and requires user interaction, with no privileges required by the attacker; impact is disclosure of confidential information. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C...

CVE-2026-56173

CVE-2026-56173 is a use-after-free vulnerability in Windows WebView that allows an authorized local attacker to escalate privileges. The issue is tied to the Windows WebView component and is listed with a high impact (local elevation of privileges) in the CVE entry. Connected sources corroborate ...

CVE-2026-57096

CVE-2026-57096 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that allows an authorized attacker to elevate privileges locally. The CVSSv3.1 base score is 7.8 (HIGH). Exploitation details are not provided beyond local privilege escalati...