CVE-2026-50334

CVE-2026-50334 is a Windows Push Notifications/Windows Notification information disclosure vulnerability. The NVD description states an unauthorized local actor could disclose sensitive information. The CIRCL seen entries corroborate a Windows notification component issue with multiple advisories...

CVE-2026-50390

CVE-2026-50390 is a Windows Kernel elevation-of-privilege in which an authorized attacker can gain local privileges through a type-confusion vulnerability (incompatible resource type). The CVE is documented with a CVSSv3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, BASE SCORE 7.0 (HIGH). Affe...

CVE-2026-50424

CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...

CVE-2026-50459

CVE-2026-50459 is a Windows Kernel elevation of privilege vulnerability described as a use-after-free in the Windows kernel that could allow a local attacker to elevate privileges. Public references in the connected documents indicate Microsoft has released updates to address this vulnerability (...

CVE-2026-50497

CVE-2026-50497 is an off-by-one error in Windows Remote Desktop Protocol that allows an unauthenticated network attacker to disclose information. Public sources in the provided documents identify the affected component as RDP and describe a network-triggered information disclosure, without detail...

CVE-2026-54107

The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...

CVE-2026-54119

CVE-2026-54119 describes a loop with an unreachable exit condition in Windows Active Directory that can be exploited to cause a network-based denial of service by an unauthorized attacker. The affected component is Windows Active Directory; the vulnerability stems from an infinite loop, leading t...

CVE-2026-56173

CVE-2026-56173 is a use-after-free vulnerability in Windows WebView that allows an authorized local attacker to escalate privileges. The issue is tied to the Windows WebView component and is listed with a high impact (local elevation of privileges) in the CVE entry. Connected sources corroborate ...

CVE-2026-61933

CVE-2026-61933 describes an out-of-bounds read in the Windows DWM Core Library that can allow a locally authorized attacker to disclose information. The CVE entry, with a CVSSv3.1 base score of 5.5 (Medium) and local access requiring low privileges and no user interaction, indicates impact is con...

CVE-2025-55676

CVE-2025-55676 affects the Windows USB Video Class System Driver and is an information disclosure vulnerability that can be exploited locally on an authenticated system. The root cause is an error message generation that reveals sensitive information from the Windows USB Video Driver. Microsoft’s...

CVE-2025-55692

Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.

CVE-2025-58720

CVE-2025-58720 (Windows Cryptographic Services) has concrete details in connected docs. The vulnerability arises from using a cryptographic primitive with a risky implementation in Windows Cryptographic Services, enabling an authenticated local attacker to disclose information. The vulnerability ...

CVE-2025-58734

CVE-2025-58734 is described as a use-after-free vulnerability in the Windows Inbox COM Objects that can allow a local attacker to achieve arbitrary code execution. The connected document from CNVD confirms that Inbox COM Objects contain a code execution vulnerability, supporting the CVE’s impact ...

CVE-2025-62452

Technical details about CVE-2025-62452 (heap-based buffer overflow in RRAS) are not publicly provided in the supplied documents. The connected KB/MS documents do not specify affected products/versions, exploit details, or mitigations. Monitor for updates.

CVE-2026-20930

CVE-2026-20930 – Windows Management Services Elevation of Privilege is a confirmed issue: a race condition due to improper synchronization in Windows Management Services can allow an authorized local attacker to elevate privileges. The concurrent-execution flaw affects Windows Management Services...

CVE-2026-21241

The CVE-2026-21241 entry identifies a use-after-free in the Windows Ancillary Function Driver for WinSock that enables a locally authenticated attacker to achieve privilege escalation . According to the description, exploitation is local with high impact to confidentiality, integrity, and availab...

CVE-2026-24292

CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...

CVE-2026-24295

CVE-2026-24295 concerns the Windows Device Association Service Elevation of Privilege. The entry indicates a LOCAL attack with LOW privileges required and NO user interaction, leading to HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH). The vulne...

CVE-2026-26173

CVE-2026-26173 affects the Windows Ancillary Function Driver for WinSock and is described as a race-condition vulnerability in a shared-resource path that can allow an authenticated local attacker to elevate privileges to SYSTEM. The connected sources confirm this is a Windows elevation-of-privil...

CVE-2026-32078

CVE-2026-32078 is a Windows Projected File System elevation-of-privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH). Attack vector is LOCAL, requires LOW privileges and has NO user interaction. The flag indicates an OFFICIAL_FIX as remediation; exploitation is currently UNPROVEN, wit...

CVE-2026-32164

CVE-2026-32164 describes a race condition in Windows User Interface Core that can allow an authorized local attacker to elevate privileges. Technical details in the connected advisories confirm the flaw is a Windows UI Core race condition and that Microsoft has released security updates to fix it...

CVE-2026-45588

CVE-2026-45588 concerns a protection mechanism failure in Windows Secure Boot that allows an authorized attacker to bypass a security feature locally. The NVD/CVE entry describes a local attack with high impact on confidentiality and integrity and no availability impact, requiring high privileges...

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...

CVE-2026-50307

CVE-2026-50307 (Windows TCP/IP) is a local privilege-escalation vulnerability in the Windows TCP/IP stack caused by a use-after-free condition. The issue could allow an authenticated, local attacker to elevate privileges on a vulnerable system. The CVE is documented across multiple sources, inclu...

CVE-2026-50315

CVE-2026-50315 is a Windows Image Acquisition vulnerability described as a null pointer dereference that allows an authorized, local attacker to achieve privilege escalation. The entry notes a CVSSv3.1 base score of 7.8 (High), with local attack vector, low attack complexity, required privileges,...

CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50350

CVE-2026-50350 concerns an information-disclosure vulnerability in Windows’ Trusted Runtime Interface Driver. An authenticated local attacker may disclose sensitive information due to an underlying flaw in the driver, with CVSSv3.1 metrics indicating Local attack vector, Low attack complexity, Lo...

CVE-2026-50378

CVE-2026-50378 is a Windows Key Guard elevation-of-privilege vulnerability caused by a race condition in a shared resource that allows a local attacker to elevate privileges. The connected sources confirm the issue and that Microsoft released updates (e.g., KB5101649 and MSRC advisories) to addre...

CVE-2026-50437

CVE-2026-50437 describes an out-of-bounds read in Windows DWM Core Library that could allow an authenticated local attacker to disclose information. Public docs identify the affected component (Windows DWM Core Library) and the impact (local information disclosure) with a CVSSv3.1 base score of 5...

CVE-2026-50473

CVE-2026-50473 is a Windows File Explorer information-disclosure vulnerability. The available sources indicate that an unauthorized actor could locally disclose sensitive information via Windows File Explorer, with the CVSS vector showing local access and low privileges required. The root cause a...

CVE-2026-57087

CVE-2026-57087 is a Windows Media Foundation remote code execution vulnerability caused by a heap-based buffer overflow in Windows Media Foundation. An unauthenticated attacker could trigger code execution over a network. Public sources confirm the flaw affects Windows Media/Media Foundation comp...

CVE-2026-57982

CVE-2026-57982 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by the use of an uninitialized resource. An authenticated attacker could disclose information over the network. Public details identify the affected component as Windows RDP/RDP client-server int...

CVE-2026-61349

CVE-2026-61349 is a Windows vulnerability in the Work Folder Service described as a use-after-free that allows an authorized attacker to elevate privileges locally. The NVD entries (and CVE records) corroborate a local-exploit scenario with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOW priv...

CVE-2026-65783

CVE-2026-65783 is a use-after-free vulnerability in Windows Autopilot that allows an authorized attacker to perform local privilege escalation. The available documents confirm the affected component (Windows Autopilot) and the underlying issue (use-after-free) with a local attacker requiring low ...

CVE-2025-55325

CVE-2025-55325 is a Buffer over-read in the Windows Storage Management Provider that enables an attacker with local access to disclose information. The CVE entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low attack complexity; confidentiality impact is High, others...

CVE-2025-55331

CVE-2025-55331: Use-after-free in Windows PrintWorkflowUserSvc that allows a locally authenticated user to escalate privileges. Connected advisories indicate Microsoft released October 2025 security updates (e.g., KB5066835 and related KBs) addressing Windows print/cryptography components; apply ...

CVE-2025-55694

CVE-2025-55694 affects the Windows Error Reporting service. The root cause is improper access control, enabling an authenticated local attacker to elevate privileges on affected Windows systems. Public documentation confirms the issue and links to Microsoft update guidance (KB5066780 and related ...

CVE-2025-58719

CVE-2025-58719 affects the Connected Devices Platform Service (Cdpsvc) in Windows. The issue is a use-after-free vulnerability that could allow an authorized local attacker to achieve privilege elevation. The connected documents confirm the vulnerability and its local impact, but do not provide e...

CVE-2025-59255

CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...

CVE-2025-59259

CVE-2025-59259 affects Windows Local Session Manager (LSM) with an improper validation of input type, enabling an unauthenticated? authorized user to cause Denial of Service over a network. According to the CVE description and EUVD-2025-34370, the exploitability is network-based (AV:N, AC:L, PR:L...

CVE-2025-60716

CVE-2025-60716 : A use-after-free in Windows DirectX can enable an authorized local attacker to elevate privileges. The affected component is Windows DirectX; root cause is a use-after-free flaw. Impact is local privilege escalation with high potential impact. The provided connected documents do ...

CVE-2025-62567

CVE-2025-62567 is a Windows Hyper-V Denial of Service vulnerability caused by an integer underflow that can be triggered by a network-based attack from an authorized user. The linked sources classify the impact as Denial of Service with a CVSS v3.1 base score of 5.3 (Network, High attack complexi...

CVE-2025-64670

CVE-2025-64670 is a Windows DirectX/Microsoft Graphics Component information disclosure vulnerability. The initial entry states exposure of sensitive data to an unauthorized actor over a network (CVSS v3.1: 6.5, Network, Low attack complexity, Low privileges). Connected documents corroborate a re...

CVE-2026-20837

CVE-2026-20837 is a Windows Media heap-based buffer overflow that enables local code execution. The vulnerability is documented across multiple feeds as a Windows Media Remote Code Execution issue, with explicit mention of Windows Media in the CVE entries. Connected sources indicate Microsoft rel...

CVE-2026-21221

CVE-2026-21221 maps to a race-condition in the Capability Access Management Service (camsvc) that allows a locally authenticated attacker to obtain elevated privileges. The root cause is concurrent execution with improper synchronization on a shared resource. The vulnerability is associated with ...

CVE-2026-21239

CVE-2026-21239 describes a heap-based buffer overflow in the Windows Kernel. An authorized attacker can achieve local privilege escalation. The vulnerability is rated CVSS v3.1 base score 7.8 (HIGH) with LOCAL, low complexity, and no user interaction required beyond initial access, and it has hig...

CVE-2026-24287

CVE-2026-24287 is a Windows kernel elevation-of-privilege vulnerability with a local attack vector. The CVSS 3.1 metrics indicate high impact to confidentiality, integrity, and availability, requiring low privileges and no user interaction, with exploit code maturity marked as UNPROVEN. The issue...

CVE-2026-26160

CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...

CVE-2026-32082

CVE-2026-32082 is a Windows SSDP Service race condition vulnerability that can enable local privilege escalation. Multiple connected sources confirm the flaw exists in Windows SSDP Service and describe an improper synchronization on a shared resource leading to elevation of privileges for a local...

CVE-2026-32088

CVE-2026-32088 describes a security feature bypass in the Windows Biometric Service. Affected component: Windows Biometric Framework service on Windows. The underlying root cause is not explicitly detailed in the provided documents. CVSS metrics indicate an attacker with physical access can explo...