CVE-2026-32215

CVE-2026-32215 is a Windows Kernel information-disclosure vulnerability caused by insertion of sensitive data into a log file, enabling an authenticated, local attacker to disclose information. Affected component is the Windows Kernel logging path; the described impact is local confidentiality br...

CVE-2026-45654

Technical details about CVE-2026-45654 are not publicly available in the provided documents. Monitor for updates from the NVD/CVE records for affected products, root cause specifics, impact, and remediation.

CVE-2026-49797

CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.

CVE-2026-50322

CVE-2026-50322 is a Windows Runtime elevation-of-privilege vulnerability caused by a race condition due to improper synchronization when accessing a shared resource. Multiple sources confirm the issue exists in Windows Runtime and enables a locally authenticated attacker to elevate privileges. Th...

CVE-2026-50377

CVE-2026-50377 is a Windows Kernel elevation-of-privilege vulnerability described as an out-of-bounds read that enables an authorized local attacker to gain higher privileges. The connected materials consistently identify the Windows Kernel as the affected component and state the root cause as a ...

CVE-2026-50462

CVE-2026-50462 affects the Windows Ancillary Function Driver for WinSock. The disclosed issue is external control of a file name or path, enabling an authorized attacker to elevate privileges locally (local privilege escalation). CVSS v3.1 score is 7.8 (High) with Privileges: Low, User Interactio...

CVE-2026-50687

CVE-2026-50687 is a Windows Win32k local privilege-escalation vulnerability caused by a use-after-free in the Windows Kernel. It affects the Win32k subsystem and enables an authenticated attacker to elevate privileges locally (base CVSS v3.1 score 8.8, vector: LOCAL, LOW complexity, LOW privilege...

CVE-2026-58632

CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...

CVE-2025-55336

Technical details (affected component/version, root cause, exploit info, and fix) for CVE-2025-55336 are not provided in the connected documents. Monitor official advisories (e.g., MSKB/NVD) for concrete remediation guidance.

CVE-2025-55687

CVE-2025-55687 is a local privilege-escalation vulnerability in Windows Resilient File System (ReFS) caused by a race condition when concurrent access to a shared resource occurs with improper synchronization. The impact is local elevation of privileges. Public docs (NCSC advisory and EUVD summar...

CVE-2025-58739

CVE-2025-58739 affects Windows File Explorer and is described as the exposure of sensitive information to an unauthorized actor, enabling spoofing over a network. The CVSS 3.1 base score is 6.5 (Network, Low attack complexity, No privileges, User interaction required) with Confidentiality impact ...

CVE-2025-59187

CVE-2025-59187 corresponds to a Windows Kernel local privilege escalation described in EUVD-2025-34304 as due to improper input validation. The vulnerability affects the Windows Kernel with the potential for an authorized attacker to elevate privileges locally. The connected KB updates discuss Wi...

CVE-2025-62219

CVE-2025-62219 is a local elevation-of-privilege in the Microsoft Wireless Provisioning System caused by a double-free error. The public descriptions in the connected documents confirm the vulnerability exists and that it enables an authorized attacker to elevate privileges on affected Windows pl...

CVE-2025-64680

CVE-2025-64680 affects Windows DWM Core Library. A heap-based buffer overflow allows an authorized, locally authenticated attacker to escalate privileges. The connected advisories/feeds confirm this CVE is part of Microsoft Windows vulnerability fixes and that Windows updates (KBs and security gu...

CVE-2026-20827

CVE-2026-20827 affects the Tablet Windows User Interface (TWINUI) Subsystem, enabling local disclosure of sensitive information to an attacker with low privileges and no user interaction. The vulnerability is mapped to a local-attack vector with high confidentiality impact (C:H, I:N, A:N) and a C...

CVE-2026-21246

CVE-2026-21246 is a heap-based buffer overflow in the Microsoft Graphics Component that enables local privilege escalation for an authorized attacker. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges, NONE user interaction) yields a base score of 7.8 (HIGH impact on confidentiality, int...

CVE-2026-24290

CVE-2026-24290 concerns the Windows Projected File System and is an Elevation of Privilege vulnerability. The CVE shows a LOCAL attack vector with LOW privileges required and NONE user interaction, with impacts on confidentiality, integrity, and availability rated as High. The metric set indicate...

CVE-2026-25186

Technical details not publicly available in the provided documents. Monitor for updates.

CVE-2026-26163

CVE-2026-26163 is a Windows Kernel elevation-of-privilege vulnerability described as a double free allowing an authorized local attacker to escalate privileges. Connected sources confirm the affected surface is Windows Kernel and the issue enables local privilege escalation with high impact. The ...

CVE-2026-27911

Technical details not publicly available in the provided documents. Monitor for updates on affected products, vulnerable component, impact, and remediation.

CVE-2026-32069

Technical details about affected products, vulnerable components, and exploitability are not provided in the provided documents; monitor for updates.

CVE-2026-32083

CVE-2026-32083 pertains to Windows’ Simple Search and Discovery Protocol (SSDP) Service elevation of privilege. The vulnerability is local, with low privileges required and no user interaction, and yields a high impact on confidentiality, integrity, and availability. Microsoft lists an official f...

CVE-2026-49787

The CVE-2026-49787 entry describes a Denial of Service vulnerability in Windows HTTP.sys caused by allocation of resources without limits or throttling, leading to an unauthorized network-based disruption. Affected component is HTTP.sys on Windows; impact is availability (denial of service) with ...

CVE-2026-50342

The CVE-2026-50342 entry describes an improper access control flaw in the Windows MIDI Service Module that enables a locally authenticated attacker to elevate privileges. The CVSS3.1 base score is 8.8 (High) with Local attack vector, Low attack complexity, Low privileges required, and No user int...

CVE-2026-50349

A race condition (concurrent execution using a shared resource with improper synchronization) in the Windows Ancillary Function Driver for WinSock allows an authorized attacker with low privileges to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with high impact on c...

CVE-2026-50384

CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...

CVE-2026-50403

CVE-2026-50403 affects Windows Runtime and is driven by a race condition due to improper synchronization in the Windows Runtime, enabling an authorized attacker to elevate privileges locally. The Windows Runtime component/file/process implicated is elevated to allow local privilege escalation. Mi...

CVE-2026-50420

CVE-2026-50420 affects Windows HTTP.sys. It is an out-of-bounds read in HTTP.sys that can allow a local, unauthenticated attacker to disclose information. The CVE is listed with a CVSS v3.1 base score of 6.2 (Medium) and requires local access with no user interaction. Public references show multi...

CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...

CVE-2026-58537

CVE-2026-58537 (Microsoft NAT Helper Components, ipnathlp.dll) is a use-after-free vulnerability that allows an authenticated local attacker to achieve elevation of privileges. The connected sources confirm the flaw and its local-privilege-impact, with Microsoft and CVE listings documenting ipnat...

CVE-2026-58635

CVE-2026-58635 is a Windows Narrator Braille elevation-of-privilege vulnerability caused by improper neutralization of special elements used in a command. Exploitation is local, requires low privileges, and does not require user interaction; successful exploitation yields high impact to confident...

CVE-2026-80083

CVE-2026-80083 is an untrusted pointer dereference in Windows Hyper-V that allows an authorized local attacker to execute code, with changed scope (privilege escape). The CVSS 3.1 score is 8.8 (HIGH) (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting high impact to confidentiality, integrity, and ...

CVE-2025-49761

CVE-2025-49761 is a Windows Kernel local privilege escalation (Use-after-free) vulnerability. The connected data confirms an effect: “Obtaining elevated privileges” with CVSS v3.1 base metrics indicating LOCAL, low attack complexity and privileges required, high impact to confidentiality/integrit...

CVE-2025-53135

CVE-2025-53135 is a race-condition based local privilege-escalation in the Windows DirectX graphics stack. Public description indicates concurrent execution on a shared resource allows an authorized, locally authenticated user to elevate privileges. The CVE is listed in Windows DirectX entries as...

CVE-2025-53804

CVE-2025-53804 affects the Windows Kernel and involves exposure of sensitive information to an unauthorized actor, allowing local disclosure. The threat is categorized with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with low complexity, where privileges are low and no user i...

CVE-2025-59205

CVE-2025-59205 is described as a race-condition vulnerability in the Microsoft Graphics Component caused by concurrent access to a shared resource, enabling an authorized local attacker to elevate privileges. The connected EUVD-2025-34293 entry reiterates the root cause and local privilege escala...

CVE-2025-59206

CVE-2025-59206 affects the Windows Resilient File System (ReFS) Deduplication Service. The vulnerability is an elevation of privilege (PrivEsc) issue that can be exploited locally to obtain increased rights. The CVSS metrics in the initial entry indicate LOCAL access, high impact on confidentiali...

CVE-2025-59241

CVE-2025-59241: A local elevation-of-privilege in Windows Health and Optimized Experiences Service due to improper link resolution before file access. The Microsoft and national cert advisories list the vulnerability as a Windows flaw tied to health/experience services; a public-exploit note exis...

CVE-2025-59508

CVE-2025-59508 is reported in Windows Speech as a race-condition in concurrent execution on a shared resource, enabling local privilege escalation for an authorized attacker. The connected NCSC advisory lists Windows Speech CVE-2025-59508 with an impact of obtaining increased rights. Public detai...

CVE-2026-20826

CVE-2026-20826 describes a race-condition in the Tablet Windows User Interface (TWINUI) Subsystem. The initial entry asserts an information disclosure/elevation of privileges vector via concurrent access to a shared resource, enabling an authorized attacker to elevate privileges locally. Microsof...

CVE-2026-32159

CVE-2026-32159 affects Windows Push Notifications. The issue is a local elevation-of-privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH). Attack requires local access, high attack complexity, and low privileges, with no user interaction, and can impact confidentiality, integrity, an...

CVE-2026-40422

CVE-2026-40422 concerns Windows File Explorer where an uninitialized resource leads to local information disclosure. The affected component is File Explorer; the underlying issue is an uninitialized resource, enabling an authorized user with local access (low privilege, no user interaction) to di...

CVE-2026-49789

CVE-2026-49789 is a Windows NTFS elevation-of-privilege vulnerability. A stack-based buffer overflow in NTFS could allow an authorized local attacker to escalate privileges. Affected component: Windows NTFS subsystem. Root cause: stack-based overflow in an NTFS operation, leading to potential cod...

CVE-2026-50674

CVE-2026-50674 describes a use-after-free vulnerability in the Windows USB Print Driver that can be exploited by an authenticated local attacker to escalate privileges. The issue affects the Windows USB Print Driver component and is triggered by a use-after-free condition in processing USB print ...

CVE-2026-58547

CVE-2026-58547 is a Windows UPnP Device Host vulnerability. The issue is a heap-based buffer overflow in upnp.dll that allows an authenticated local attacker to elevate privileges. The NVD entry and multiple advisories describe the root cause as a heap overflow in UPnP device host, with CVSS deta...

CVE-2026-58609

The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...

CVE-2026-69518

CVE-2026-69518 is a heap-based buffer overflow in Windows Remote Desktop that allows an unauthorized attacker to execute code over a network. The vulnerability is classified with CVSS 3.1 score 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable attack...

CVE-2025-53139

CVE-2025-53139 is tied to Windows Hello. The connected sources confirm a vulnerability where sensitive information is transmitted in cleartext, enabling a local attacker to bypass a Windows Hello security feature. The risk is described as a local, low-gesture exploit with high impact on confident...

CVE-2025-54108

CVE-2025-54108 is a local-elevation-of-privilege in the Windows Capability Access Management Service (camsvc) caused by a race-condition with an improper synchronization of a shared resource. Publicly disclosed in Microsoft’s CVE entry and mirrored in MSRC/KB notes, the vulnerability affects Wind...

CVE-2025-55328

Vulnerability summary (CVE-2025-55328) : A race condition in Windows Hyper-V involving a shared resource can be exploited by an authorized local attacker to elevate privileges. The issue is categorized under Windows Hyper-V with a high impact (local, privilege escalation) and a high base score in...