CVE-2026-50384

CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...

CVE-2026-50462

CVE-2026-50462 affects the Windows Ancillary Function Driver for WinSock. The disclosed issue is external control of a file name or path, enabling an authorized attacker to elevate privileges locally (local privilege escalation). CVSS v3.1 score is 7.8 (High) with Privileges: Low, User Interactio...

CVE-2026-54109

CVE-2026-54109 : Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized local attacker to execute code. The NVD entry confirms a local-execution impact with high severity (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Details in connected sources show the vulnerabilit...

CVE-2026-57084

CVE-2026-57084 affects Windows File Explorer. Description: a use of an uninitialized resource leads to local information disclosure. CVSSv3.1 base score 5.5 (Medium); attack vector LOCAL, required user interaction, no confidentiality integrity or availability impact beyond disclosure per provided...

CVE-2025-55687

CVE-2025-55687 is a local privilege-escalation vulnerability in Windows Resilient File System (ReFS) caused by a race condition when concurrent access to a shared resource occurs with improper synchronization. The impact is local elevation of privileges. Public docs (NCSC advisory and EUVD summar...

CVE-2025-55690

CVE-2025-55690 is described in connected advisories as a Windows PrintWorkflowUserSvc use-after-free vulnerability that enables local privilege escalation by an authorized user. The MSRC entry confirms the affected component and vulnerability class (use-after-free leading to elevation of privileg...

CVE-2025-58725

CVE-2025-58725 is described in connected documents as a heap-based buffer overflow in Windows COM that allows a locally authenticated attacker to elevate privileges. The CVE is associated with Windows COM components, with a CVSS v3.1 score of 7.0 (Local, High impact, Privilege escalation) and Exp...

CVE-2025-62469

CVE-2025-62469 describes a race-condition vulnerability in the Microsoft Brokering File System. The flaw is a concurrency issue in a shared resource that, when triggered by an authorized attacker, can lead to local privilege escalation. Publicly available sources in the connected documents confir...

CVE-2026-20874

CVE-2026-20874 is a Windows Management Services race condition that can lead to local privilege elevation. The initial description states the issue is a race condition in Windows Management Services exploited by an authorized attacker to escalate privileges. Connected documents corroborate this u...

CVE-2026-20939

CVE-2026-20939: Windows File Explorer information disclosure allowing a locally authenticated user to view sensitive data. The issue has a CVSSv3.1 base score of 5.5 (Local, Low attack complexity, Low privileges, Confidentiality impact: High). Microsoft has released fixes in January 2026 security...

CVE-2026-26162

CVE-2026-26162 is a Windows OLE vulnerability described as a type-confusion in resource access that enables a locally authenticated attacker to elevate privileges. The Red Hat and NVD/NCSC entries confirm the same issue, with Microsoft’s MSRC entry associating it to Windows OLE and listing Window...

CVE-2026-49787

The CVE-2026-49787 entry describes a Denial of Service vulnerability in Windows HTTP.sys caused by allocation of resources without limits or throttling, leading to an unauthorized network-based disruption. Affected component is HTTP.sys on Windows; impact is availability (denial of service) with ...

CVE-2026-50406

CVE-2026-50406 affects Windows Backup Engine with a use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Connected sources confirm the issue exists in Windows Backup Engine and describe local privilege escalation as the impact, with Microsoft issuing u...

CVE-2026-50420

CVE-2026-50420 affects Windows HTTP.sys. It is an out-of-bounds read in HTTP.sys that can allow a local, unauthenticated attacker to disclose information. The CVE is listed with a CVSS v3.1 base score of 6.2 (Medium) and requires local access with no user interaction. Public references show multi...

CVE-2026-50442

Public technical details about CVE-2026-50442 are not provided in the supplied documents. Monitor for updates from MSRC/NCSC and NVD; apply the available Windows File Explorer update when released.

CVE-2026-50674

CVE-2026-50674 describes a use-after-free vulnerability in the Windows USB Print Driver that can be exploited by an authenticated local attacker to escalate privileges. The issue affects the Windows USB Print Driver component and is triggered by a use-after-free condition in processing USB print ...

CVE-2026-58533

CVE-2026-58533 is listed as a Windows Remote Desktop Client information-disclosure vulnerability stemming from the use of an uninitialized resource in the Windows RDP client. Connected sources confirm the affected component is the Windows Remote Desktop Client and describe the impact as unauthori...

CVE-2026-58537

CVE-2026-58537 (Microsoft NAT Helper Components, ipnathlp.dll) is a use-after-free vulnerability that allows an authenticated local attacker to achieve elevation of privileges. The connected sources confirm the flaw and its local-privilege-impact, with Microsoft and CVE listings documenting ipnat...

CVE-2026-58547

CVE-2026-58547 is a Windows UPnP Device Host vulnerability. The issue is a heap-based buffer overflow in upnp.dll that allows an authenticated local attacker to elevate privileges. The NVD entry and multiple advisories describe the root cause as a heap overflow in UPnP device host, with CVSS deta...

CVE-2026-58609

The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...

CVE-2026-58635

CVE-2026-58635 is a Windows Narrator Braille elevation-of-privilege vulnerability caused by improper neutralization of special elements used in a command. Exploitation is local, requires low privileges, and does not require user interaction; successful exploitation yields high impact to confident...

CVE-2025-58727

CVE-2025-58727 describes a race-condition in the Windows Connected Devices Platform Service (Cdpsvc) that allows an authenticated, local attacker to elevate privileges. The issue originates from concurrent execution using a shared resource without proper synchronization. Documents identify the af...

CVE-2025-59510

Technical details about CVE-2025-59510 (RRAS in Windows) are not publicly provided in the supplied documents. Monitor for updates from Microsoft regarding affected products, impact, and remediation.

CVE-2025-62462

CVE-2025-62462 is a Windows ProjFS (Projected File System) Elevation of Privilege vulnerability caused by a buffer over-read, enabling an authorized local attacker to escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL and LOW privileges required and no user interaction. Connec...

CVE-2025-62569

CVE-2025-62569 is a Use‑After‑Free vulnerability in the Microsoft Brokering File System that elevates privileges locally for an authenticated attacker. The CVE is categorized with CVSS v3.1 as Local, Low Privileges Required, High Impact (Confidentiality, Integrity, Availability), base score 7.0. ...

CVE-2025-62571

CVE-2025-62571 is a Windows Installer Elevation of Privilege vulnerability caused by improper input validation. The CVE affects Windows Installer, enabling an authorized, local attacker to escalate privileges (CVSS v3.1: 7.8, Local, Privileges Required: Low, User Interaction: None). Connected sou...

CVE-2026-20848

CVE-2026-20848 describes a race condition in Windows SMB Server caused by concurrent execution over a shared resource with improper synchronization. This vulnerability could allow an authorized attacker to elevate privileges over the network. Connected documents confirm the issue is categorized a...

CVE-2026-57097

CVE-2026-57097 describes an Untrusted search path in Microsoft XML that allows a physical attacker to bypass a security feature. Affects Microsoft XML; impact is described as high for confidentiality, integrity, and availability with a physical attack requiring no user interaction. No exploit det...

CVE-2026-58542

CVE-2026-58542 is a heap-based buffer overflow in Windows Media that could allow a local attacker to execute arbitrary code. Affected components include Windows Media and related Media Foundation code paths; the vulnerability is exploitable with local access and has a high impact (code execution)...

CVE-2025-55691

CVE-2025-55691 is an elevation-of-privilege flaw in Windows PrintWorkflowUserSvc caused by a use-after-free; it affects Windows Print workflow handling and enables local privilege escalation for authorized users (LOCAL, LOW privileges required, no user interaction). Public references indicate Mic...

CVE-2025-60719

Technical details about CVE-2025-60719 are not provided in the connected documents. The initial description notes a local privilege elevation in Windows AFD/WinSock, but no vendor/version specifics or fixes are included here. Monitor official advisories for updates.

CVE-2025-62213

Technical details about CVE-2025-62213 (affected component, root cause, impact, remediation) are not disclosed in the provided documents; no specifics on exploitability or affected products are available here; monitor for updates.

CVE-2025-62454

CVE-2025-62454 is a heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver that could allow an authorized local attacker to achieve elevated privileges. Connected notes confirm this CVE is mapped to the Windows Cloud Files Mini Filter Driver elevation of privilege vulnerability ...

CVE-2025-62472

CVE-2025-62472 affects Windows Remote Access Connection Manager. The issue is described as an elevation of privilege vulnerability caused by use of an uninitialized resource, allowing an authorized local attacker to gain higher privileges. Microsoft’s December 2025 updates (e.g., KB5071501/KB5071...

CVE-2025-62572

CVE-2025-62572 is a Windows vulnerability in Application Information Services causing an out-of-bounds read that enables local privilege elevation for an authenticated attacker. Affected products are Windows components (notably Windows client/server SKUs referenced in the Microsoft advisories). M...

CVE-2026-49803

CVE-2026-49803 describes a race condition in the Windows AppX Deployment Service due to improper synchronization, enabling an authorized attacker to perform local privilege escalation. The NVD entry corroborates the description: concurrent execution on a shared resource leads to elevation of priv...

CVE-2026-50342

The CVE-2026-50342 entry describes an improper access control flaw in the Windows MIDI Service Module that enables a locally authenticated attacker to elevate privileges. The CVSS3.1 base score is 8.8 (High) with Local attack vector, Low attack complexity, Low privileges required, and No user int...

CVE-2026-54993

CVE-2026-54993 describes a heap-based buffer overflow in Microsoft Windows Media Foundation that could allow a local attacker to execute code on a vulnerable system. The public descriptions in the provided documents identify the affected component as Windows Media Foundation, with the vulnerabili...

CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...

CVE-2026-57085

CVE-2026-57085 is a Windows Print Spooler vulnerability described as an out-of-bounds read in Print Spooler Components that allows an authorized, local attacker to disclose information. Connected sources confirm the affected component and local disclosure impact, with Microsoft and CVE trackers n...

CVE-2026-58539

CVE-2026-58539 is a Windows Remote Desktop Client/RDP vulnerability described as an out-of-bounds read that could allow an unauthenticated attacker to disclose information over a network. The connected documents corroborate this as a Windows RDP/Remote Desktop Client issue with public advisories ...

CVE-2026-62726

CVE-2026-62726 is a Windows vulnerability described as a use-after-free in the Windows Telephony Service that enables local privilege escalation by an authorized user. The CVSS 3.1 vector (LOCAL, HIGH impact to confidentiality, integrity, and availability) yields a base score of 7.0. The provided...

CVE-2026-32075

CVE-2026-32075 affects Windows that uses the UPnP Device Host; vulnerability is Elevation of Privilege via a local vector. Requires LOW privileges and no user interaction, with high impact on confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remediation is an offici...

CVE-2026-49807

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-56168

CVE-2026-56168 : Null pointer dereference in Windows SMB Server can allow an authorized attacker to cause a Network-based Denial of Service. It targets the Windows SMB Server component and has a CVSS v3.1 base vector of Network, Low Attack Complexity, Privileges Required: Low, No User Interaction...

CVE-2026-58535

CVE-2026-58535 affects the Windows Remote Desktop Client. The root cause is a use of an uninitialized resource in Windows RDP, enabling an unauthenticated, network-based disclosure of information. Public data from NVD lists CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base score 7...

CVE-2025-55698

CVE-2025-55698 is a denial-of-service vulnerability in the Windows DirectX Graphics Kernel caused by a null pointer dereference. The issue affects Windows DirectX Runtime/Graphics Kernel components and can be triggered remotely to deny service on the affected system. Microsoft references this as ...

CVE-2025-60706

According to the NCSC advisory, CVE-2025-60706 is a vulnerability in Windows Hyper-V where an out-of-bounds read can allow an authorized local attacker to disclose information (impact: access to sensitive data). The CVE is listed under Windows Hyper-V in the advisory with a CVSS v3.1 base score o...

CVE-2025-62465

CVE-2025-62465 is a local Denial-of-Service vulnerability in Windows DirectX (DirectX Graphics Kernel) caused by a null pointer dereference. It affects Windows DirectX components and can be exploited locally by an authorized attacker to disrupt services. Connected sources confirm the vulnerabilit...

CVE-2026-20821

CVE-2026-20821 is a Windows Remote Procedure Call information disclosure vulnerability that could allow a local attacker to obtain sensitive data. The available description confirms an information disclosure resulting from RPC handling, but the connected documents do not provide vendor-specific p...