2236 matches found
CVE-2026-61349
CVE-2026-61349 is a Windows vulnerability in the Work Folder Service described as a use-after-free that allows an authorized attacker to elevate privileges locally. The NVD entries (and CVE records) corroborate a local-exploit scenario with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOW priv...
CVE-2026-62725
CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...
CVE-2026-62798
CVE-2026-62798 describes an untrusted pointer dereference in Windows Win32K that allows an authorized attacker to disclose information locally. Documents indicate the affected component is Windows Win32K and the vulnerability enables local information disclosure with a CVSS 3.1 base score of 5.5 ...
CVE-2025-53154
CVE-2025-53154 concerns the Windows Ancillary Function Driver for WinSock and describes a null pointer dereference that enables a local, authorized user to achieve privilege escalation. The CVSSv3.1 metrics cited by Microsoft indicate a local attack vector, low attack complexity, and required pri...
CVE-2025-53810
CVE-2025-53810 describes a type confusion vulnerability in Windows Defender Firewall Service that allows an authorized local attacker to escalate privileges. The connected NC SC/ENISA-style document confirms the affected component as Windows Defender Firewall Service and lists the impact as obtai...
CVE-2025-54091
Technical details for CVE-2025-54091 are not publicly provided in the connected documents. The initial description notes a local privilege elevation via Hyper-V, but no specific root cause, affected products, or fixes are given here. Monitor for updates.
CVE-2025-54105
CVE-2025-54105 describes a race condition in the Microsoft Brokering File System that can enable local privilege escalation by an authorized attacker. Connected sources confirm a Windows-focused vulnerability and indicate remediation via Microsoft hotpatches and September 2025 security updates (K...
CVE-2025-54894
CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.
CVE-2025-58719
CVE-2025-58719 affects the Connected Devices Platform Service (Cdpsvc) in Windows. The issue is a use-after-free vulnerability that could allow an authorized local attacker to achieve privilege elevation. The connected documents confirm the vulnerability and its local impact, but do not provide e...
CVE-2025-58731
CVE-2025-58731 is an Inbox COM Objects use-after-free vulnerability. The connected EUVD entry ( inbox COM Objects ) and CVE records identify the issue as enabling local code execution by an unauthenticated attacker who can trigger the use-after-free condition. Public references point to Microsoft...
CVE-2025-58734
CVE-2025-58734 is described as a use-after-free vulnerability in the Windows Inbox COM Objects that can allow a local attacker to achieve arbitrary code execution. The connected document from CNVD confirms that Inbox COM Objects contain a code execution vulnerability, supporting the CVE’s impact ...
CVE-2025-59284
CVE-2025-59284 is Windows NTLM spoofing vulnerability with local attack vector affecting NTLM-related components. The description confirms exposure of sensitive information to an unauthorized actor, enabling spoofing locally. Connected MS advisories and listings indicate Microsoft released update...
CVE-2025-59290
CVE-2025-59290 is a local privilege escalation caused by a use-after-free in Windows Bluetooth Service. Affected component: Windows Bluetooth Service. Root cause: use-after-free. Impact: an authorized attacker can elevate privileges locally. Exploitation status is not specified in the provided do...
CVE-2025-60720
Technical details for CVE-2025-60720 (TDX.sys) are not provided in the Connected documents. The Initial Description notes local privilege escalation via a buffer over-read; no vendor/version/patch details are supplied here; monitor for updates.
CVE-2025-62464
CVE-2025-62464 is a Windows Projected File System Elevation of Privilege vulnerability (buffer over-read) that could allow an authorized local attacker to gain higher privileges. Affected product: Windows Projected File System (ProjFS) components; root cause described as a buffer over-read in Pro...
CVE-2025-62473
CVE-2025-62473 is a Windows RRAS information-disclosure vulnerability caused by a buffer over-read. It enables an unauthenticated attacker to disclose information over the network. Connected sources confirm affected component as Windows Routing and Remote Access Service (RRAS) and label the vulne...
CVE-2025-62567
CVE-2025-62567 is a Windows Hyper-V Denial of Service vulnerability caused by an integer underflow that can be triggered by a network-based attack from an authorized user. The linked sources classify the impact as Denial of Service with a CVSS v3.1 base score of 5.3 (Network, High attack complexi...
CVE-2026-20865
CVE-2026-20865 is a Windows Management Services use-after-free vulnerability that enables an authenticated, local attacker to achieve elevated privileges. The issue arises from a prior use-after-free in the Windows Management Services component, with exploitation requiring local access and no use...
CVE-2026-20937
CVE-2026-20937 affects Windows File Explorer and is described as an information-disclosure vulnerability allowing a locally authorized attacker to disclose information. The provided documents confirm a Windows File Explorer exposure, with CVSS 3.1/5.5 (Local access, Low attack complexity, High co...
CVE-2026-21240
CVE-2026-21240 describes a local, authenticated TOCTOU race in Windows HTTP.sys that can allow privilege escalation. Affected component: Windows HTTP.sys. Root cause: time-of-check/time-of-use race condition. Impact: high (local escalation of privileges, potential confidentiality, integrity, and ...
CVE-2026-24292
CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...
CVE-2026-26160
CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...
CVE-2026-32085
CVE-2026-32085 affects Windows Remote Procedure Call and corresponds to an information-disclosure vulnerability that can allow an authenticated local attacker to read sensitive data. The NVD/NCSC/MSRC entries confirm this vulnerability and note that Microsoft has released updates to fix the issue...
CVE-2026-32164
CVE-2026-32164 describes a race condition in Windows User Interface Core that can allow an authorized local attacker to elevate privileges. Technical details in the connected advisories confirm the flaw is a Windows UI Core race condition and that Microsoft has released security updates to fix it...
CVE-2026-34328
CVE-2026-34328 describes an information-disclosure issue in Windows Audio Service, allowing a local attacker with low privileges to disclose sensitive information. Affected: Windows Audio Service (Windows). Root cause details are not provided beyond the high-level description. CVSS v3.1 base scor...
CVE-2026-44800
CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...
CVE-2026-49180
This CVE concerns the Universal Plug and Play component upnp.dll, where an improper link resolution before file access (link following) can lead to local information disclosure. The entry notes that an authorized attacker can disclose information locally, with a CVSS base score of 5.5 (Medium). A...
CVE-2026-49790
Technical details about CVE-2026-49790 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories for concrete technical information.
CVE-2026-49791
CVE-2026-49791 affects Windows Routing and Remote Access Service (RRAS). The issue is an improper link resolution before file access (link following) that can allow an authorized, local attacker to elevate privileges. The vulnerability is triggered locally with low attack complexity and low privi...
CVE-2026-50296
CVE-2026-50296 is a use-after-free vulnerability in the DirectX Graphics Kernel that allows an authorized, local attacker to elevate privileges. The cited CVSS 3.1 vector is LOCAL, with HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges with no user interacti...
CVE-2026-50298
CVE-2026-50298 concerns Windows Spaceport.sys: an integer overflow/wraparound vulnerability in the kernel component that could allow an unauthenticated, physical attacker to achieve privilege escalation. Affected software is Windows kernel-space Spaceport.sys; impact is elevation of privileges wi...
CVE-2026-50303
CVE-2026-50303 describes a vulnerability in Windows Key Guard where use of a cryptographic primitive with a risky implementation enables an authorized local attacker to bypass a security feature. Affected component: Windows Key Guard cryptographic handling; root cause: risky implementation of the...
CVE-2026-50308
CVE-2026-50308 is a Windows NTFS vulnerability described as an integer underflow (wrap or wraparound) that could allow an unauthorized attacker to execute code locally. Sources consistently state: affected component is Windows NTFS on Windows systems; impact is local code execution with high seve...
CVE-2026-50331
CVE-2026-50331 is a Windows Application Model Core API elevation-of-privilege vulnerability caused by a use-after-free issue. It affects the Windows Application Model Core API component and allows an authorized attacker with local access to elevate privileges. Microsoft has issued updates to addr...
CVE-2026-50358
CVE-2026-50358 is a Windows Media use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free in Windows Media code path. Impact: local privilege escalation with high severity as per Microsoft guid...
CVE-2026-50436
CVE-2026-50436 is a Windows Kernel local privilege escalation caused by a use-after-free vulnerability. Updates from Microsoft (e.g., KB5095051) address the issue; the CVSS vector indicates local access, low attack complexity, low privileges required, with high impact on confidentiality, integrit...
CVE-2025-49762
CVE-2025-49762 describes a race condition caused by concurrent access to a shared resource in the Windows Ancillary Function Driver for WinSock, enabling a locally authenticated attacker to escalate privileges. The description explicitly identifies the affected component and the impact as local p...
CVE-2025-50167
CVE-2025-50167 involves a race condition in Windows Hyper-V due to improper synchronization on a shared resource, enabling an authorized local attacker to elevate privileges. The description in the Connected Documents confirms the vulnerability impact as local privilege escalation within Hyper‑V....
CVE-2025-54115
Technical details about CVE-2025-54115 are not publicly provided in the connected documents. Based on the initial description, no product/version specifics or mitigation are given; monitor for updates.
CVE-2025-54919
CVE-2025-54919 is linked to Windows Win32K GRFX and is described as a race condition in a shared resource that could allow an authorized, local attacker to execute code. The Connected documents confirm the CVE within Windows Win32K GRFX but do not provide concrete exploit details, affected versio...
CVE-2025-55694
CVE-2025-55694 affects the Windows Error Reporting service. The root cause is improper access control, enabling an authenticated local attacker to elevate privileges on affected Windows systems. Public documentation confirms the issue and links to Microsoft update guidance (KB5066780 and related ...
CVE-2025-59193
CVE-2025-59193 describes a race condition in Windows Management Services (a Windows component) where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The description in the CVE notes local, privilege-escalation impact due to improper synchronizatio...
CVE-2025-59203
CVE-2025-59203 affects the Windows StateRepository API. The issue is described as an insertion of sensitive information into a log file, enabling local disclosure by an authenticated attacker with local access. The CVSS v3.1 base score is 5.5 (Medium) with Local attack vector and Low attack compl...
CVE-2025-59215
CVE-2025-59215 is a Windows Graphics Component elevation-of-privilege vulnerability. Multiple sources describe a use-after-free/resource-management error in the Microsoft Graphics Component that can allow an authenticated, local attacker to obtain higher privileges. The NVD entry notes local priv...
CVE-2025-59253
CVE-2025-59253 is documented with concrete details in connected sources: a local-privilege/reliance on an access-control flaw in the Windows Search Component that can enable a denial-of-service by an authorized attacker. The CVE is linked to Microsoft/security guidance entries and EUVD-2025-34274...
CVE-2025-60716
CVE-2025-60716 : A use-after-free in Windows DirectX can enable an authorized local attacker to elevate privileges. The affected component is Windows DirectX; root cause is a use-after-free flaw. Impact is local privilege escalation with high potential impact. The provided connected documents do ...
CVE-2026-20930
CVE-2026-20930 – Windows Management Services Elevation of Privilege is a confirmed issue: a race condition due to improper synchronization in Windows Management Services can allow an authorized local attacker to elevate privileges. The concurrent-execution flaw affects Windows Management Services...
CVE-2026-20935
This CVE (CVE-2026-20935) describes an information-disclosure vulnerability in Windows 11 VBS Enclave due to an untrusted pointer dereference. A local attacker could disclose data via the VBS Enclave. Affected product: Windows 11 (versions 23H2, 24H2, 25H2) with VBS Enclave. Root cause is a untru...
CVE-2026-21241
The CVE-2026-21241 entry identifies a use-after-free in the Windows Ancillary Function Driver for WinSock that enables a locally authenticated attacker to achieve privilege escalation . According to the description, exploitation is local with high impact to confidentiality, integrity, and availab...