1189 matches found
CVE-2026-62746
CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...
CVE-2026-20842
CVE-2026-20842 is a Windows elevation-of-privilege vulnerability in the Desktop Window Manager (DWM) due to a use-after-free in the DWM core library. Exploitation would be local (requiring prior authentication) and could grant total compromise of the affected system, as described in the CVE entry...
CVE-2026-20918
Technical details about CVE-2026-20918 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.
CVE-2026-26168
CVE-2026-26168 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows an authorized local attacker to elevate privileges. Publicly referenced Red Hat and Dutch/NCSC/CIRCL sources confirm the Windows driver component and local privilege impact; exploitation sta...
CVE-2026-27920
CVE-2026-27920 is a Windows vulnerability in the UPnP Device Host that enables a local privilege escalation . The entry indicates a local attack vector with low required privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 base s...
CVE-2026-40400
CVE-2026-40400 is a Windows PowerShell relative path traversal vulnerability that could enable an authorized attacker to execute code over a network. The CVE entry identifies a remote code execution risk with NETWORK attack vector, LOW attack complexity, and LOW privileges required, but with UI i...
CVE-2026-45603
The vulnerability CVE-2026-45603 affects Windows’ Ancillary Function Driver for WinSock (AFD). The issue is a use-after-free in the WinSock-related driver, leading to local privilege escalation for an authorized attacker. The CVSS3.1 assessment shows HIGH impact with LOCAL access, HIGH confidenti...
CVE-2026-45637
CVE-2026-45637 is a use-after-free vulnerability in Windows DWM Core Library that permits a locally authenticated attacker to achieve elevation of privileges. The underlying flaw is a use-after-free condition in the DWM Core Library, enabling an attacker with low privileges and no user interactio...
CVE-2026-45639
The CVE-2026-45639 entry relates to an out-of-bounds read in Windows Remote Desktop Protocol (RDP). The underlying issue enables an unauthenticated, network-based attacker to disclose information over the network without user interaction. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:...
CVE-2026-50330
CVE-2026-50330 is a Windows Remote Desktop Client vulnerability described as a heap-based buffer overflow that allows an unauthenticated attacker to escalate privileges over the network. The CVE appears in multiple sources (NVD, EUVD, CIRCL) with consistent language about privilege elevation via ...
CVE-2026-50471
CVE-2026-50471 is a heap-based buffer overflow in Windows NTFS that could allow a local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components as described in multiple sources (NVD/NCSC/CIRCL) and is being addressed by Microsoft with published updates (e.g., KB arti...
CVE-2026-50498
CVE-2026-50498 affects the Windows Universal Disk Format File System Driver (UDFS) and is an Elevation of Privilege vulnerability in the UDFS component. The root cause is described as a privilege/escalation condition within the Windows UDFS driver, leading to local privilege escalation with a hig...
CVE-2026-56175
CVE-2026-56175 describes a heap-based buffer overflow in Windows NTFS that allows an authorized, local attacker to elevate privileges. Connected sources (Microsoft MSRC update, NVD, NTFS/CIRCL sightings) confirm the vulnerability is in Windows NTFS, with local-privilege-escalation potential and a...
CVE-2026-62748
CVE-2026-62748 affects the Windows Telephony Service. The issue is a race condition due to improper synchronization on a shared resource, enabling a locally authorized attacker to elevate privileges. The weakness is exploited locally with no user interaction and results in high impact to confiden...
CVE-2026-65672
CVE-2026-65672 is a Windows vulnerability describing a heap-based buffer overflow in the Windows Remote Access API. An authorized attacker can elevate privileges locally. CVSS v3.1 metrics: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Attack vector is LOCAL, with LOW complexity and...
CVE-2025-55330
CVE-2025-55330 is a Windows BitLocker vulnerability described as improper enforcement of the behavioral workflow, enabling a security feature bypass via physical access. Affected software is Windows BitLocker; the issue centers on how BitLocker’s workflow is enforced, allowing bypass of protectio...
CVE-2025-64679
CVE-2025-64679 is a heap-based buffer overflow in Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. The NCSC advisory and CVE listings confirm this affects Windows DWM Core Library and is tracked under CVE-2025-64679 with a high-severity impact (local,...
CVE-2026-20859
CVE-2026-20859 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability described as a use-after-free in kernel-mode drivers that could enable a locally authenticated attacker to elevate privileges. The connected documents corroborate a Windows kernel-driver context and list Microsoft...
CVE-2026-20926
CVE-2026-20926 describes a race condition in the Windows SMB Server that allows an authorized network attacker to elevate privileges. The vulnerability affects Windows SMB Server components and is tied to concurrent execution on a shared resource with improper synchronization. Mitigation is via M...
CVE-2026-20936
CVE-2026-20936 is an information-disclosure vulnerability in Windows NDIS (network data path). The issue is an out-of-bounds read in the NDIS driver that could allow an authorized attacker with physical access to disclose data. In the Nessus/NCSC/NVD entries, the CVE is flagged under Windows NDIS...
CVE-2026-25190
CVE-2026-25190 is a Windows GDI vulnerability (Untrusted search path) that enables local code execution. The CVE is documented across NVD/NCSC/EUVD with a base CVSS v3.1 score of 7.8 (High) and a local attack vector requiring user interaction. Microsoft has released fixes via March 2026 updates (...
CVE-2026-26180
CVE-2026-26180 is a Windows kernel local elevation of privilege issue. The vulnerability affects the Windows kernel with a local attacker able to gain HIGH impact on confidentiality, integrity, and availability. Exploitation is LOCAL with LOW complexity and LOW privileges required, and no user in...
CVE-2026-32086
CVE-2026-32086 is an Elevation of Privilege vulnerability in Windows’ Function Discovery Service (fdwsd.dll). The entry notes local attack potential with a HIGH impact on confidentiality, integrity, and availability, requiring LOW privileges and no user interaction. The CVSS details indicate a HI...
CVE-2026-32156
CVE-2026-32156 is a use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host (upnp.dll) that allows a local, unauthorized attacker to execute code on the system. The connected sources confirm the issue affects Windows UPnP Device Host and list it among UPnP-related C...
CVE-2026-34336
Technical details (affected product/version, root cause, exploit information, or patch specifics) are not provided in the supplied documents. Monitor for updates as public details may be released separately.
CVE-2026-42984
CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...
CVE-2026-50316
CVE-2026-50316 affects the Windows Kernel. Insertion of sensitive information into a log file enables a locally authenticated attacker to disclose information. The CVSS v3.1 metrics show a Local attack vector, Low attack complexity, Low privileges required, and No user interaction, with Confident...
CVE-2026-50381
The CVE-2026-50381 entry concerns the Windows Composite Image File System driver (cimfs.sys). A type confusion in this component can lead to local information disclosure by an authenticated user with low privileges (local access, no user interaction required). The CVSS 3.1 base score is 5.5 (Conf...
CVE-2026-50430
CVE-2026-50430 is the Windows Push Notifications information-disclosure vulnerability. The available sources state that exposure of sensitive information to an unauthorized actor can occur, allowing a locally-present attacker to disclose information. Affected component: Windows Push Notifications...
CVE-2026-62717
Summary: CVE-2026-62717 is a heap-based buffer overflow in Windows Message Queuing that could allow an authorized local attacker to elevate privileges. This is supported by multiple sources (NVD entry and CVE records). Affected component: Windows Message Queuing. Vulnerability type & root cause: ...
CVE-2026-62754
CVE-2026-62754 describes a heap-based buffer overflow in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation. The flaw is triggered within the Kerberos-related code path, enabling elevation of privileges on the affected system. The available documents confirm...
CVE-2026-62758
CVE-2026-62758 is a heap-based buffer overflow in Windows Remote Access Connection Manager that permits a locally authenticated attacker to elevate privileges. Affected component: RASMAN service on Windows. Root cause: heap overflow enabling arbitrary code execution with HIGH impact on confidenti...
CVE-2026-62777
CVE-2026-62777 concerns Windows License Manager. The available documents state: a missing authentication for a critical function could allow an authorized attacker to elevate privileges locally. The CVSS 3.1 vector is Local, Low attack complexity, with Privileges Required: Low and User Interactio...
CVE-2026-32093
CVE-2026-32093 affects Windows Function Discovery Service (fdwsd.dll). The vulnerability is a race condition due to improper synchronization in shared resource access, enabling an authorized attacker to elevate privileges locally. Public sources (MSRC/MSKB advisories and NCSC) confirm the issue a...
CVE-2026-32223
CVE-2026-32223 affects the Windows USB Printing Stack (usbprint.sys). The entry notes Elevation of Privilege with physical attack vector, low complexity, no privileges required, and no user interaction, with high impact on confidentiality, integrity, and availability. The provided data does not i...
CVE-2026-41092
CVE-2026-41092 describes an improper access control in Microsoft Kinect that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Affected component: Kinect functionality; root cause is insuffic...
CVE-2026-42829
CVE-2026-42829 describes an improper access control in Windows Administrator Protection that allows an authorized attacker with LOCAL access and LOW privileges to bypass a security feature with NO user interaction. The impact is HIGH on confidentiality, integrity, and availability, per CVSS 3.1. ...
CVE-2026-47289
CVE-2026-47289 is a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution over a network. The vulnerability is exploitable remotely (attack vector: NETWORK) with low complexity and requires user interaction, yielding a high impact on confidentiality, integrity...
CVE-2026-50310
CVE-2026-50310 describes an integer overflow/wraparound in Windows Devices Human Interface which allows an authorized local attacker to disclose information. Affected component is the Windows Devices Human Interface; root cause is an overflow condition that can leak data locally. Microsoft has re...
CVE-2026-50509
CVE-2026-50509 is a Windows WWAN Service deserialization vulnerability that could enable local privilege escalation when an authorized user triggers the flaw. Affected component: Windows Wireless Wide Area Network Service (WwanSvc). Root cause: deserialization of untrusted data leading to elevati...
CVE-2026-54125
CVE-2026-54125 affects Windows Runtime and describes a race-condition vulnerability in concurrent execution on a shared resource that enables local privilege elevation for an authenticated attacker. The CVE is rated with CVSSv3.1 base metrics: AV Local, AC Low, PR Low, UI None, S unchanged, C/H/I...
CVE-2026-57090
CVE-2026-57090 is a remote code execution vulnerability in Windows Media Foundation due to a heap-based buffer overflow. The flaw allows an unauthenticated attacker to run arbitrary code over the network. Public sources in the connected documents corroborate an RCE impact for Windows Media Founda...
CVE-2026-58619
CVE-2026-58619 is a Windows Sensor Data Service vulnerability described as a use-after-free that enables an authorized attacker to locally elevate privileges. The vulnerability is reported with CVSS 3.1: LOCAL attack vector, HIGH impact (C, I, A), and low privileges required with no user interact...
CVE-2026-61936
CVE-2026-61936 describes a local security bypass in the Windows Defender Firewall Service where missing authorization allows an authorized attacker to bypass a security feature locally. The NVD entry and CVE records corroborate this description. According to the provided metrics, the impact is hi...
CVE-2026-62696
CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...
CVE-2026-62719
CVE-2026-62719 describes a heap-based buffer overflow in Windows Message Queuing that allows an authorized, locally-authenticated attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with Local attack vector, Low attack complexity, and privileges required. The impact is Conf and Inte...
CVE-2026-62734
CVE-2026-62734 describes a race condition due to concurrent execution with an improper synchronization in the Windows Telephony Service, allowing an authorized attacker to locally elevate privileges. The issue is identified as a local privilege escalation with a high impact on confidentiality, in...
CVE-2025-58718
CVE-2025-58718 is a use-after-free in the Windows Remote Desktop Client that allows a network-based, unauthenticated attacker to execute code on the affected system. CVSSv3.1 shows AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH); exploitation requires user interaction. Connect...
CVE-2026-21247
CVE-2026-21247 is an input-validation flaw in Windows Hyper-V that can allow a locally authenticated attacker to execute arbitrary code. The vulnerability arises from improper handling of input, with a CVSSv3.1 base score of 7.3 (HIGH), indicating local attack vector, low attack complexity, and r...