CVE-2026-33827

CVE-2026-33827 is a Windows TCP/IP race-condition vulnerability in the IPv6/IPSec processing path (tcpip.sys) that enables remote code execution. Exploitation described in connected docs requires sending crafted IPv6 packets (with IPSec) to Windows hosts with IPSec enabled; no authentication or u...

CVE-2026-45604

CVE-2026-45604 is an out-of-bounds read vulnerability in the Windows AppID (Windows Application Identity) Subsystem that can allow an authorized local attacker to disclose information. The affected component is described as the AppID Subsystem; the root cause is an out-of-bounds read leading to i...

CVE-2026-20805

CVE-2026-20805 is a local information-disclosure vulnerability in Microsoft Windows Desktop Window Manager (dwm.exe). The provided documents describe that an authenticated, low-privilege user can leak sensitive information via improper handling of ALPC-related structures (ALPC ports/sections) and...

CVE-2026-59134

The CVE-2026-59134 entry concerns a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution and requires network access (attack vector: NETWORK) with user interaction. The documented impact is high (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). No explicit rem...

CVE-2026-62816

CVE-2026-62816 describes a heap-based buffer overflow in the Windows Reliable Multicast Transport Driver (RMCAST). The vulnerability allows an unauthenticated attacker on an adjacent network to execute code on the affected system. Available sources state the issue and its high impact (C/H/I/A: hi...

CVE-2026-62792

Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...

CVE-2026-49176

Summary: CVE-2026-49176 is a Windows WalletService elevation of privilege vulnerability described as improper privilege management that could allow an authorized local attacker to escalate privileges. The available sources (NVD/CVE records) confirm the issue but do not provide concrete details on...

CVE-2026-62788

CVE-2026-62788 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. Impact is high across confidentiality, integrity, and availability; attack vector is local with low privileges required and no user interaction. The provided document...

CVE-2026-32157

CVE-2026-32157 affects the Remote Desktop Client and enables remote code execution over the network. The CVSSv3.1 score is 8.8 (HIGH), with confidentiality, integrity, and availability all rated High. Attack requires network access and user interaction, with privilegesN/A and exploitation current...

CVE-2026-62732

CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...

CVE-2026-62811

CVE-2026-62811 describes a heap-based buffer overflow in Windows HTTP.sys that enables an authenticated, local attacker to elevate privileges. The CVSS 3.1 vector (LOCAL, LOW attack complexity, LOW privileges, NONE user interaction; confidentiality, integrity, and availability impact HIGH; scope ...

CVE-2026-44802

CVE-2026-44802 is a use-after-free in Windows DWM Core Library that enables a local privilege escalation by an authorized user. CVSS 3.1 base score 7.8 (High) with local attack vector, low attack complexity, and require low privileges with no user interaction; impact to confidentiality, integrity...

CVE-2026-50454

The CVE-2026-50454 entry describes a Privilege Elevation via Relative Path Traversal in Windows User Interface Core. Affected component: Windows User Interface Core; attack requires local access (LOCAL) with LOW privileges and no user interaction per the CVSS v3.1 vector. Impact is Elevation of P...

CVE-2026-62784

Microsoft Local Security Authority Server (lsasrv) is affected by CVE-2026-62784 due to a heap-based buffer overflow that allows an authorized attacker to execute code over the network. CVSS v3.1 score: 8.8 (High) with Network access, Low complexity, Privileges Required: Low, User Interaction: No...

CVE-2026-40415

Technical details (affected product, component, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2026-59132

CVE-2026-59132 describes a null pointer dereference in Windows TCP/IP that enables a network-based denial of service by an unauthenticated attacker. Affected component is Windows TCP/IP; root cause is a null pointer dereference leading to denial of service. CVSSv3.1 base score is 7.5 (HIGH) with ...

CVE-2026-65777

The CVE-2026-65777 entry describes a vulnerability in Windows Active Directory where inadequate encryption strength enables an authorized attacker to bypass a security feature over the network. The issue is tied to encryption robustness within Active Directory; no product version specifics, explo...

CVE-2025-59509

CVE-2025-59509 affects Windows Speech, with the issue described as insertion of sensitive information into data sent by Windows Speech. The impact is local disclosure of information to an authorized attacker. The Connected documents confirm Windows-related fixes and hotpatch updates, but do not p...

CVE-2026-20854

CVE-2026-20854 is a Windows Local Security Authority Subsystem Service (LSASS) use-after-free vulnerability that would allow an authenticated attacker to execute code remotely over the network. The primary public details come from Microsoft update guidance and vulnerability trackers, which identi...

CVE-2026-42981

The provided documents identify CVE-2026-42981 as a Windows Performance Monitor remote code execution vulnerability caused by an integer underflow (wrap/wraparound). The issue is exploitable over the network without user interaction and with no privileges required (AV:N/PR:N/UI:N), as indicated b...

CVE-2026-21525

CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...

CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2026-61352

The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2026-62713

CVE-2026-62713 : Heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Available documents identify the affected component as the Windows Cloud Files Mini Filter Driver, with a local attack vector and low privileges r...

CVE-2026-33842

The CVE-2026-33842 entry describes a local information disclosure in Windows File Explorer. The vulnerability allows an authorized (low privileges) attacker to disclose sensitive information locally through the File Explorer component. Per the NVD entry, the impact is confined to confidentiality ...

CVE-2026-20857

CVE-2026-20857 affects the Windows Cloud Files Mini Filter Driver. The vulnerability is an untrusted pointer dereference that enables an authorized attacker to elevate privileges locally. Multiple Nessus/NVD/NCSC entries map this CVE to the January 2026 Microsoft security update KB5074109 (Window...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2026-57094

CVE-2026-57094 is a remote-code-execution vulnerability in Microsoft Windows Media Foundation caused by a heap-based buffer overflow. It affects Windows Media Foundation components and can be exploited over a network to run arbitrary code. Public details confirm the vulnerability as a network-att...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2026-70347

CVE-2026-70347 describes a heap-based buffer overflow in Windows Installer that can enable an authenticated, local attacker to elevate privileges. Affected component is Windows Installer; the vulnerability is a local, privilege-escalation flaw with high impact (C:H/I:H/A:H) and CVSSv3.1 score 7.8...

CVE-2026-20856

CVE-2026-20856 is a Windows Server Update Services (WSUS) remote code execution vulnerability caused by improper input validation. Exploitation is possible over a network with no user interaction; CVSSv3.1 base score 8.1 (High). Public references note this is addressed by January 2026 security up...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2026-32183

CVE-2026-32183 is a Windows Snipping Tool vulnerability that allows local execution of arbitrary code due to improper neutralization of special elements in a command (command injection). Affected component: Snipping Tool on Windows. Impact per sources: Executing (remote) code with high confidenti...

CVE-2026-58626

CVE-2026-58626 is a Windows Remote Desktop Services use-after-free vulnerability that can allow an authenticated attacker to execute arbitrary code over the network. The CVE is rated CVSS v3.1 base score 8.8 (High) with Network attack, Low attack complexity, Privileges Required: Low, User Interac...

CVE-2026-65773

CVE-2026-65773 concerns improper access control in Windows Kernel, enabling a locally authenticated attacker to elevate privileges. Affected software/component: Windows Kernel (details not expanded in provided documents). Root cause: incorrect access control checks; impact: local privilege escala...

CVE-2026-40378

CVE-2026-40378 affects Windows Local Security Authority Subsystem Service (LSASS). A memory allocation with an excessive size value can allow an unauthenticated attacker to cause a network-based denial of service. The CVSSv3.1 base score is 7.5 (HIGH). No exploitation details are provided in the ...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...

CVE-2026-42977

CVE-2026-42977 describes a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with Local attack vector, high complexity, and req...

CVE-2026-50447

CVE-2026-50447 is a Windows Message Queuing (MSMQ) remote-code-execution vulnerability. The issue is a heap-based buffer overflow in MSMQ that could allow an unauthenticated attacker to execute code over the network. Public sources indicate high-severity impact (CVSS v3.1: 9.8, network attack, no...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2026-61358

The CVE-2026-61358 entry concerns Windows Accessibility Infrastructure (ATBroker.exe) with an improper link resolution before file access (‘link following’) vulnerability that allows an authorized, local attacker to elevate privileges. Reported CVSSv3.1: 7.8 (HIGH) with Local access, Low attack c...

CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2026-32073

CVE-2026-32073 refers to a Local Privilege Escalation in the Windows Ancillary Function Driver for WinSock. The advisory notes a local attack vector with high impact (C:H/I:H/A:H) and a low-privilege, no-user-interaction requirement, under CVSS 3.1: base score 7.0, attack vector Local, attack com...

CVE-2026-42983

CVE-2026-42983 is a Windows vulnerability described across multiple sources as a use-after-free in the DWM Core Library that allows an authorized, local attacker to elevate privileges. The issue is identified consistently in Microsoft’s MSRC page and NVD records; no public exploit details or defa...

CVE-2026-42989

Winlogon Elevation of Privilege (CVE-2026-42989) is caused by improper link resolution before file access ("link following"). This vulnerability allows an authorized, local attacker to gain higher privileges. Affected: Winlogon component on Windows; impact is local privilege escalation with a CVS...

CVE-2026-47652

The CVE-2026-47652 entry concerns a Windows Hyper-V component vulnerability described as an out-of-bounds read that can yield local code execution by an unauthorized attacker. Public sources indicate the flaw affects Windows Hyper-V, with an attack vector that is Local and requires High privilege...

CVE-2026-62766

CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...