CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50345

CVE-2026-50345 corresponds to a race condition in Windows Runtime (concurrent execution with improper synchronization) that allows an authorized attacker to perform local privilege escalation. The entry lists the vulnerability as a Windows Runtime elevation-of-privilege issue with CVSSv3.1 base m...

CVE-2026-50347

CVE-2026-50347 is a Windows Data.dll vulnerability characterized by a heap-based buffer overflow that allows an unauthorized, local attacker to execute code. The affected component is Windows Data.dll; the underlying issue is a heap overflow leading to remote-code-execution-style impact via local...

CVE-2026-50350

CVE-2026-50350 concerns an information-disclosure vulnerability in Windows’ Trusted Runtime Interface Driver. An authenticated local attacker may disclose sensitive information due to an underlying flaw in the driver, with CVSSv3.1 metrics indicating Local attack vector, Low attack complexity, Lo...

CVE-2026-50361

CVE-2026-50361 describes a double free in Microsoft Brokering File System leading to local privilege elevation for an authenticated attacker. The vulnerability affects the Brokering File System component and is triggered via improper memory management that can allow an attacker with local access ...

CVE-2026-50385

CVE-2026-50385 affects Windows Runtime. The issue is a race-condition in a shared resource during concurrent execution, enabling a locally authenticated attacker to elevate privileges. Public details in connected sources confirm the vulnerability, its local privilege-escalation impact, and the Wi...

CVE-2026-50390

CVE-2026-50390 is a Windows Kernel elevation-of-privilege in which an authorized attacker can gain local privileges through a type-confusion vulnerability (incompatible resource type). The CVE is documented with a CVSSv3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, BASE SCORE 7.0 (HIGH). Affe...

CVE-2026-50392

CVE-2026-50392 is a use-after-free vulnerability in Windows Secure Kernel Mode that enables an authorized, local attacker to elevate privileges. Connected sources identify the flaw in the Windows Secure Kernel Mode and confirm exploitation would occur locally with elevated impact to confidentiali...

CVE-2026-50397

CVE-2026-50397 is a Windows Kernel Use-After-Free vulnerability that allows an authenticated local attacker to elevate privileges. Root cause: use-after-free in the kernel. Impact: local privilege escalation with high severity (CVSS v3.1: 7.0, HIGH). Exploitation details are not provided in the s...

CVE-2026-50435

CVE-2026-50435 (Windows Overlay Filter): A buffer over-read in the Windows Overlay Filter enables a locally authenticated attacker to elevate privileges. The exploitation context is local with low attack complexity and no user interaction, and the impact is elevation of privileges with high confi...

CVE-2026-50466

CVE-2026-50466 is a local privilege escalation in the Windows Brokering File System caused by a use-after-free in the Windows Brokering File System component. Public documentation confirms that an authorized attacker could elevate privileges locally (CVSSv3.1 base score 7.8, LOCAL attack vector, ...

CVE-2026-50476

Microsoft Windows CVE-2026-50476 is a local privilege-escalation vulnerability in the Windows Network Connections Service caused by a use-after-free. Affected component is the Windows Network Connections Service; root cause is a use-after-free condition that enables an authorized attacker to elev...

CVE-2026-50674

CVE-2026-50674 describes a use-after-free vulnerability in the Windows USB Print Driver that can be exploited by an authenticated local attacker to escalate privileges. The issue affects the Windows USB Print Driver component and is triggered by a use-after-free condition in processing USB print ...

CVE-2026-50682

CVE-2026-50682 describes an out-of-bounds read in Windows Active Directory (Active Directory Domain Services) that can allow an authorized attacker to cause a denial of service over the network. The description and cross-references in the connected documents confirm the affected component as Wind...

CVE-2026-54115

CVE-2026-54115 is a Windows Message Queuing (MSMQ) elevation of privilege vulnerability with an integer overflow/wraparound issue described as affecting Windows Active Directory. The CVE entry indicates an authorized, local attacker can elevate privileges. Public references show multiple advisori...

CVE-2026-54986

NVD reports CVE-2026-54986 as a heap-based buffer overflow in Windows Win32K that enables a locally authenticated attacker to perform privilege escalation. Affected component is Windows Win32K; root cause described as heap overflow within that subsystem. The available sources do not specify vulne...

CVE-2026-54996

CVE-2026-54996 describes a race condition in the Windows USB Print Driver caused by concurrent access to a shared resource with improper synchronization. An authorized local attacker could elevate privileges. The entry provides CVSS 3.1 base score 7.0 (High) with local attack vector, high impact ...

CVE-2026-55004

CVE-2026-55004 corresponds to a local privilege-elevation flaw described as a double-free in Microsoft Printer Drivers. The CVSSv3.1 score is 7.8 (High) with local attack vector, low attack complexity, and privileges required, no user interaction, impacting confidentiality, integrity, and availab...

CVE-2026-56168

CVE-2026-56168 : Null pointer dereference in Windows SMB Server can allow an authorized attacker to cause a Network-based Denial of Service. It targets the Windows SMB Server component and has a CVSS v3.1 base vector of Network, Low Attack Complexity, Privileges Required: Low, No User Interaction...

CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...

CVE-2026-57095

CVE-2026-57095 affects Windows Win32K (Win32k.sys) and is described as an elevation-of-privileges vulnerability due to exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public details confirm impact as privilege escalation with local access and a hig...

CVE-2026-58546

CVE-2026-58546 is a Windows Remote Desktop Client Information Disclosure vulnerability. The initial and connected records confirm that the issue stems from use of an uninitialized resource in Windows RDP, enabling an unauthorized attacker to disclose information over a network. Affected component...

CVE-2026-58547

CVE-2026-58547 is a Windows UPnP Device Host vulnerability. The issue is a heap-based buffer overflow in upnp.dll that allows an authenticated local attacker to elevate privileges. The NVD entry and multiple advisories describe the root cause as a heap overflow in UPnP device host, with CVSS deta...

CVE-2026-58609

The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...

CVE-2026-49171

The CVE-2026-49171 entry describes a Use-After-Free vulnerability in Windows Speech Runtime that enables a locally authenticated attacker to elevate privileges. Affected: Microsoft Windows Speech Runtime components; root cause: use-after-free leading to arbitrary code or privilege escalation (det...

CVE-2026-49183

CVE-2026-49183 describes a race condition in Windows Clipboard Server due to improper synchronization, enabling a local attacker with low privileges to elevate to higher rights. The affected component is the Windows Clipboard Server (shared resource handling) and the root cause is concurrent exec...

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...

CVE-2026-49799

Technical details are not publicly available in the provided documents. No confirmed affected products, fixes, or exploit specifics are described here; monitor official sources for updates.

CVE-2026-50348

CVE-2026-50348 describes a race condition in Windows Runtime where concurrent execution using a shared resource with improper synchronization can allow an unauthenticated attacker to elevate privileges over a network. The description and publicly visible details indicate the vulnerability affects...

CVE-2026-50356

CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...

CVE-2026-50363

CVE-2026-50363 is a Windows Push Notifications elevation-of-privilege vulnerability characterized by a heap-based buffer overflow. An authorized, local attacker could escalate privileges. Microsoft has released updates addressing this (e.g., KB5095051 and MSRC/MSVC advisories) and recommends appl...

CVE-2026-50410

CVE-2026-50410 is a Windows Runtime use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. Multiple connected sources confirm the issue affecting Windows Runtime and describe local privilege escalation as the impact, with CVSS v3.1 score of 7.0 (HIGH) and L...

CVE-2026-50424

CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...

CVE-2026-50436

CVE-2026-50436 is a Windows Kernel local privilege escalation caused by a use-after-free vulnerability. Updates from Microsoft (e.g., KB5095051) address the issue; the CVSS vector indicates local access, low attack complexity, low privileges required, with high impact on confidentiality, integrit...

CVE-2026-50461

CVE-2026-50461 is a Windows NTFS heap-based buffer overflow vulnerability that allows a local attacker to execute code. The issue is linked to the NTFS subsystem, enabling arbitrary code execution with high impact (Local, Requires User Interaction, Privilege: None). Public records in NVD/EUVD/NCS...

CVE-2026-50469

CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

CVE-2026-54982

CVE-2026-54982 affects the Windows Reliable Multicast Transport Driver (RMCAST). The issue is an integer underflow in RMCAST that can allow an adjacent-network attacker to execute code on the vulnerable host (remote code execution). CVSS v3.1 indicates high impact with adjacent network exploitati...

CVE-2026-54987

CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...

CVE-2026-56643

CVE-2026-56643 is a DirectX Graphics Kernel elevation of privilege vulnerability tracked by Microsoft. It stems from a use-after-free in the Windows Kernel’s DirectX Graphics Kernel component, enabling a local attacker with normal privileges to escalate to higher privileges. The vulnerability is ...

CVE-2026-57091

CVE-2026-57091 affects Windows File History Service. A stack-based buffer overflow in the service allows an authorized attacker to elevate privileges locally. Evidence from multiple sources confirms affected component and local privilege escalation impact; Microsoft has released updates to addres...

CVE-2026-58533

CVE-2026-58533 is listed as a Windows Remote Desktop Client information-disclosure vulnerability stemming from the use of an uninitialized resource in the Windows RDP client. Connected sources confirm the affected component is the Windows Remote Desktop Client and describe the impact as unauthori...

CVE-2026-58539

CVE-2026-58539 is a Windows Remote Desktop Client/RDP vulnerability described as an out-of-bounds read that could allow an unauthenticated attacker to disclose information over a network. The connected documents corroborate this as a Windows RDP/Remote Desktop Client issue with public advisories ...

CVE-2026-58601

CVE-2026-58601 describes a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized, local attacker to elevate privileges. The available description specifies a local-privelege-escalation impact, but does not provide product/version specifics, exploitati...

CVE-2026-58629

CVE-2026-58629 is a Windows DirectX vulnerability described as a use-after-free in the DirectX Graphics Kernel that allows a locally authenticated attacker to elevate privileges. The NVD entry notes a local attack vector with high impact (C/H/I/A all high) and the CVSSv3.1 score of 7.0 (Local, Pr...

CVE-2026-58635

CVE-2026-58635 is a Windows Narrator Braille elevation-of-privilege vulnerability caused by improper neutralization of special elements used in a command. Exploitation is local, requires low privileges, and does not require user interaction; successful exploitation yields high impact to confident...

CVE-2026-44800

CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...

CVE-2026-49175

CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...

CVE-2026-49184

The CVE-2026-49184 entry describes a heap-based buffer overflow in Windows NTFS that allows a local attacker to execute code. Affected component: Windows NTFS subsystem; root cause is a heap-based overflow. Impact: local code execution with high severity (CVSSv3.1 base score 8.4). No specific pat...

CVE-2026-49784

Summary: CVE-2026-49784 describes a race condition in the Microsoft Windows App Store caused by concurrent access to a shared resource with improper synchronization. The vulnerability allows an authorized local attacker to elevate privileges. The reported CVSS v3.1 vector is AV:L/AC:H/PR:L/UI:N/S...