1255 matches found
CVE-2026-50681
CVE-2026-50681 is a Windows Secure Channel information disclosure vulnerability in Windows Cryptographic Services. The available documents describe exposure of sensitive information to an unauthorized actor, allowing a locally authenticated attacker to disclose data. Connected sources confirm the...
CVE-2026-56648
CVE-2026-56648 is a Windows Network File System (NFS) server vulnerability described as a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized attacker to elevate privileges over the network. Public sources identify the root cause as a TOCTOU race in NFS and classify t...
CVE-2026-58530
CVE-2026-58530 affects Windows Resilient File System (ReFS). The issue is a heap-based buffer overflow in ReFS that allows an unauthorized attacker to execute code locally. The vulnerability has a CVSS v3.1 base score of 7.8 (HIGH), with LOCAL attack vector, no privileges required, and user inter...
CVE-2026-62773
CVE-2026-62773 describes a use-after-free vulnerability in Windows Kerberos that enables a locally authenticated attacker to elevate privileges. The flaw is triggered in the Kerberos subsystem and, when exploited, could allow elevation of rights with high impact on confidentiality, integrity, and...
CVE-2026-62793
CVE-2026-62793 describes a buffer over-read in Windows NTFS that can allow an authorized local attacker to disclose information. Affected component: Windows NTFS filesystem handling. Root cause: memory over-read leading to confidential data exposure (C: HIGH, I: NONE, A: NONE per CVSS 3.1). Explo...
CVE-2025-62470
CVE-2025-62470 is a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that enables a locally authenticated attacker to escalate privileges. The vulnerability affects the CLFS driver in Windows, with local access required and high impact on confidentiality, integrity, ...
CVE-2026-20919
CVE-2026-20919 is a race-condition vulnerability in Windows SMB Server that allows an authorized network attacker to elevate privileges. The issue concerns concurrent access to a shared resource without proper synchronization. Public documentation in the connected sources confirms Windows SMB Ser...
CVE-2026-21237
Technical details of CVE-2026-21237 are not publicly provided in the supplied documents; no affected products, vulnerable components, or fixes are described here. Monitor for updates from official sources.
CVE-2026-27918
CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...
CVE-2026-33839
Technical details for CVE-2026-33839 (affected product/component, root cause, impact, remediation) are not provided in the connected documents. Monitor for updates or consult primary sources for actionable vulnerability specifics.
CVE-2026-41087
CVE-2026-41087 affects Windows File Explorer; a local attacker can cause exposure of sensitive information to obtain disclosure on the host. The vulnerability is rated CVSSv3.1: 5.5 (Medium) with Local access, Low attack complexity, Privileges Required: Low, no user interaction, and Confidentiali...
CVE-2026-41108
CVE-2026-41108 is a heap-based buffer overflow in the Microsoft Windows DNS Client that allows an authorized, local attacker to perform privilege escalation. Affected component: Windows DNS client functionality (DNS resolution path); root cause: heap-based overflow leading to elevation of privile...
CVE-2026-50321
CVE-2026-50321 is a Windows USB Driver elevation-of-privilege vulnerability (race condition on a shared resource). An authorized, local attacker could exploit this to gain higher privileges on the affected system, per the NVD entry and cross-referenced sources. Connected advisories corroborate th...
CVE-2026-50326
CVE-2026-50326 affects the Windows Unified Consent System. Description: use-after-free leading to local privilege escalation for an authorized attacker. Connected sources confirm the vulnerability and indicate Microsoft patches are available (e.g., MSRC/KB articles). In any write-up, cite that th...
CVE-2026-50329
CVE-2026-50329 is a Windows DWM Core Library elevation-of-privilege vulnerability rooted in a use-after-free in the Windows kernel. The available connected sources confirm the affected component as Windows DWM Core Library (Windows Kernel) and describe local privilege escalation possible by an au...
CVE-2026-50383
CVE-2026-50383 is a Windows Print Spooler Information Disclosure vulnerability (buffer over-read) in Print Spooler Components. It allows a locally authenticated attacker to disclose information on the affected system. According to the provided data, the attack vector is Local, with Low privileges...
CVE-2026-50407
CVE-2026-50407 : A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized local attacker to elevate privileges. The vulnerability is confirmed in multiple feeds (NVD/NCSC/MSRC) and is listed under ReFS with an impact of local privilege escalation. Microsoft has re...
CVE-2026-50429
CVE-2026-50429 describes an out-of-bounds read in the Windows Kernel that may allow a remote attacker to disclose information over a network. The entry is tied to Microsoft’s Windows kernel information-disclosure vulnerability with a base CVSSv3.1 score of 8.2 (Network, Low attack complexity, No ...
CVE-2026-50469
CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...
CVE-2026-50489
CVE-2026-50489 is a heap-based buffer overflow in Windows Win32K that allows an authorized, locally authenticated attacker to escalate privileges. The root cause is a memory corruption in the Win32K subsystem that leads to code execution with SYSTEM rights. The CVE entry is supported by multiple ...
CVE-2026-50496
CVE-2026-50496 is an out-of-bounds read vulnerability in Windows Network Policy Server SNMP that allows an unauthenticated attacker to disclose information over the network. Affects the SNMP component of Windows NPS; impact is information disclosure with a CVSS v3.1 base score of 7.5 (Network att...
CVE-2026-62711
The CVE-2026-62711 issue is a local privilege escalation caused by a use-after-free in Windows Win32K. Affected component: Win32K memory management; root cause: use-after-free vulnerability. Impact, if exploited: an authorized local attacker can elevate privileges. CVSS v3.1 score is 7.8 ( HIGH )...
CVE-2026-62740
CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...
CVE-2026-20831
The CVE-2026-20831 entry corresponds to a TOCTOU race condition in Windows Ancillary Function Driver for WinSock that could allow a local, authenticated attacker to elevate privileges. The description in the initial document confirms local privilege escalation as the impact. Connected documents i...
CVE-2026-20852
CVE-2026-20852 is a Windows Hello privilege-assignment vulnerability that enables a locally authenticated attacker to tamper with local data due to incorrect privilege handling in the Windows Hello component. The issue is labeled as a local, high-severity problem with no user interaction required...
CVE-2026-21255
CVE-2026-21255 is a Windows Hyper-V security feature bypass vulnerability described as improper access control that enables an authorized local attacker to bypass a security feature. Publicly available sources identify Hyper-V as the affected component, with the root cause tied to access-control ...
CVE-2026-26176
Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.
CVE-2026-26178
CVE-2026-26178 is a Windows Advanced Rasterization Platform Elevation of Privilege vulnerability with CVSS v3.1 base score 8.8 (HIGH). The issue is exploitable via NETWORK with LOW attack complexity and NONE privileges required, but it requires user interaction. Impact is rated HIGH for confident...
CVE-2026-27922
CVE-2026-27922 is a vulnerability described as a use-after-free in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. The Red Hat/NVD entries confirm the same description. The connected documents do not enumerate affected product v...
CVE-2026-32170
Technical details for CVE-2026-32170 are not publicly available in the provided documents beyond the basic description. No vendor, product, version, root cause, impact, or fix specifics are supplied here. Monitor official disclosures and CVE/Microsoft update guidance for updates.
CVE-2026-32222
CVE-2026-32222 is a Windows Win32k elevation-of-privilege vulnerability. The provided data indicate a local exploit path with LOW privileges required and NO user interaction, potentially compromising confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 7.8 (HIGH) wi...
CVE-2026-40406
Technical details about CVE-2026-40406 are not publicly available in the provided documents; monitor for updates as additional specifics (affected products, root cause, fixes) may be released.
CVE-2026-40413
Technical details about CVE-2026-40413, including affected products, vulnerable components, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor official advisories for updates.
CVE-2026-49184
The CVE-2026-49184 entry describes a heap-based buffer overflow in Windows NTFS that allows a local attacker to execute code. Affected component: Windows NTFS subsystem; root cause is a heap-based overflow. Impact: local code execution with high severity (CVSSv3.1 base score 8.4). No specific pat...
CVE-2026-50352
CVE-2026-50352 affects Windows Cryptographic Services. Description: Exposure of sensitive information to an unauthorized actor allows a locally authenticated attacker to disclose information. Impact: information disclosure (CONFIDENTIALITY) with LOCAL attack vector; CVSS 3.1 base 5.5 (AV:L/AC:L/P...
CVE-2026-54127
CVE-2026-54127 describes a use-after-free vulnerability in Windows Hyper-V that enables a local elevation of privileges. The CVSS 3.1 vector indicates a local attack, high impact on confidentiality, integrity, and availability, with no user interaction required and no privileges needed. The conne...
CVE-2026-56647
CVE-2026-56647 is a Windows vulnerability in the Windows Remote Access Service Infrastructure where an integer overflow/wraparound can let an authorized attacker elevate privileges over a network. The affected component is the Windows Remote Access Service Infrastructure, and the root cause is an...
CVE-2026-58527
CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...
CVE-2026-58545
CVE-2026-58545 is a Windows Kernel Security Feature Bypass vulnerability. The connected documents confirm an improper access control in the Windows Kernel that could let an authorized locally attacker bypass a security feature. Metrics indicate CVSS v3.1 base score 5.5 (Medium), with Local attac...
CVE-2026-58546
CVE-2026-58546 is a Windows Remote Desktop Client Information Disclosure vulnerability. The initial and connected records confirm that the issue stems from use of an uninitialized resource in Windows RDP, enabling an unauthorized attacker to disclose information over a network. Affected component...
CVE-2026-61357
CVE-2026-61357 is described as a use-after-free in Application Information Services that allows an authorized attacker to locally elevate privileges. The available data indicate a local attack vector with low privilege required and no user interaction, resulting in high impact to confidentiality,...
CVE-2026-62690
CVE-2026-62690 concerns Windows Push Notifications. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to elevate privileges locally. The available documents do not specify the affected product versio...
CVE-2026-62736
CVE-2026-62736 describes a heap-based buffer overflow in the Windows DHCP Client that allows an authorized user to elevate privileges locally. The vulnerability targets the Windows DHCP client component and is characterized by a local attack vector with low attack complexity and no user interacti...
CVE-2026-62738
The vulnerability CVE-2026-62738 affects Windows Management Instrumentation and enables an authorized, local attacker to disclose information through an out-of-bounds read. The available descriptions consistently state information disclosure as the impact; no details on specific vulnerable binari...
CVE-2026-65785
Summary of CVE-2026-65785 : The Windows DHCP Client is affected by a vulnerability described as “Uncontrolled resource consumption,” enabling an unauthenticated attacker on an adjacent network to cause a Denial of Service . The CVSS 3.1 vector indicates: Attack Vector: Adjacent , Attack Complexit...
CVE-2025-53150
CVE-2025-53150 is a Use-After-Free vulnerability in Windows Digital Media that enables a locally authenticated attacker to elevate privileges. Public documents (NVD, NCSC, EUVD, CIRCL/CVE listings) describe the issue as a local privilege-escalation bug but do not provide concrete details on affec...
CVE-2025-55339
CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...
CVE-2025-59196
CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...
CVE-2025-59201
CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...
CVE-2026-26152
CVE-2026-26152 pertains to Microsoft Cryptographic Services with a local elevation-of-privilege vulnerability. The CVSS 3.1 vector indicates local access, high impact on confidentiality, integrity, and availability, with user interaction not required. PrivilegesRequired is LOW, AttackComplexity i...