CVE-2026-25165

CVE-2026-25165 is a Windows local privilege escalation affecting Performance Counters. The description notes a local attack with low privileges, no user interaction, and high impact on confidentiality, integrity, and availability. The underlying root cause and affected component details are not p...

CVE-2026-44801

CVE-2026-44801 = heap-based buffer overflow in Remote Desktop Client enabling a remote code execution by an unauthenticated attacker over the network. Root cause: heap overflow; impact: remote execution of code. Affected software/version details are not provided in the documents. No exploit statu...

CVE-2026-58531

CVE-2026-58531 is a Windows SMB elevation-of-privilege vulnerability caused by a race condition in a shared resource. It affects Windows SMB components and enables an authorized attacker to elevate privileges over the network. CVSS v3.1 base score 7.5 (NETWORK, HIGH impact), per Microsoft’s advis...

CVE-2026-61925

CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...

CVE-2026-62700

CVE-2026-62700 describes a heap-based buffer overflow in Windows NTFS that allows an authenticated, local attacker to elevate privileges. The vulnerability affects the NTFS component on Windows and is rated CVSSv3.1#3.1 with a base score of 7.8 (HIGH) and local attack vector/low complexity, requi...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62883

CVE-2026-62883 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. Affected component: Windows DNS resolution logic. Root cause: numeric truncation leads to improper handling of DNS-related data, enabling local privilege escalation...

CVE-2026-65788

CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...

CVE-2026-70307

CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...

CVE-2025-59505

CVE-2025-59505 is a Windows Smart Card Reader privilege-escalation vulnerability described as a double-free issue that could allow an authenticated local attacker to gain elevated privileges. The connected material confirms the CVE is categorized as a high-severity (CVSS v3.1 base 7.8) local, use...

CVE-2026-20822

CVE-2026-20822 is a Microsoft Windows graphics subsystem elevation-of-privilege vulnerability in the Microsoft Graphics Component caused by a use-after-free condition. It enables a locally authenticated attacker to elevate privileges on the host. The CVSS vector (Local, High complexity, Low privi...

CVE-2026-32072

CVE-2026-32072 corresponds to an unauthenticated spoofing vulnerability in Windows Active Directory (local access). The Red Hat and NCSC entries corroborate the flaw as an AD authentication issue with local spoofing potential. Public documentation lists this CVE under Windows Active Directory wit...

CVE-2026-32077

CVE-2026-32077 is a Windows UPnP Device Host elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH) with a LOCAL attack vector, LOW attack complexity, and required LOW privileges; no user interaction is needed. Affects confidentiality, integrity, and availability (all HIGH i...

CVE-2026-33096

CVE-2026-33096 is an out-of-bounds read vulnerability in Windows HTTP.sys that can cause Denial-of-Service over the network. Public references confirm the issue and note that Microsoft has fixed the vulnerability in April 2026 security updates. Affected software is Windows (HTTP.sys component); t...

CVE-2026-40399

Technical details about CVE-2026-40399 are not publicly available in the provided documents. Monitor for updates from the original sources; current descriptions only state a stack-based buffer overflow in Windows TCP/IP enabling local privilege elevation.

CVE-2026-40409

Technical details for CVE-2026-40409 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD for affected products, root cause, impact, and remediation.

CVE-2026-42916

The CVE-2026-42916 entry describes an Integer underflow in the Windows NT OS Kernel that enables local privilege escalation for an authorized attacker. Affected: Windows NT OS Kernel (kernel-level component). Root cause: wrap/underflow during arithmetic in the kernel. Impact: high across confiden...

CVE-2026-42986

CVE-2026-42986 describes a use-after-free in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally. Affected: Microsoft Graphics Component; vulnerability class: use-after-free leading to local privilege escalation. Root cause as stated: after-free condi...

CVE-2026-44810

CVE-2026-44810: Improper authentication in Windows Cryptographic Services allows a local attacker to elevate privileges. Affected: Windows Cryptographic Services. Impact: HIGH (CVSS 3.1 base 8.4) with local attack, no user interaction required; confidentiality, integrity, and availability are HIG...

CVE-2026-45634

The CVE describes an out-of-bounds read in the Windows DHCP Server that enables an authorized local attacker to disclose information. The affected component is Windows DHCP Server; the root cause is a memory read violation leading to information disclosure. The CVSS metrics indicate a local attac...

CVE-2026-48568

CVE-2026-48568 concerns a protection mechanism failure in Windows Secure Boot that allows a local attacker to bypass a security feature. The connected sources indicate an in-scope vulnerability where an attacker with HIGH privileges and local access can bypass integrity and confidentiality protec...

CVE-2026-49788

CVE-2026-49788 : An HTTP/2 denial-of-service vulnerability due to unbounded resource allocation allows an unauthenticated network attacker to exhaust resources and disrupt service. CVSSv3.1 base score 7.5 (HIGH); vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. No product/vendor/version details are p...

CVE-2026-50332

CVE-2026-50332 is a Windows Kernel elevation-of-privilege vulnerability described as a heap-based buffer overflow that can be exploited locally by an authorized user. Public sources in the connected documents confirm the issue affects Windows Kernel and note the CVE’s inclusion among July 2026 pa...

CVE-2026-50357

CVE-2026-50357 affects Windows Resilient File System (ReFS). The issue is a numeric truncation error in ReFS that, per the provided documents, can enable an authorized attacker to execute code locally. The MSRC/MSVCN details list this as an elevation of privileges / local arbitrary code execution...

CVE-2026-50427

CVE-2026-50427 affects Content Delivery Manager. Description: use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVSS v3.1: 7.8 (Local, Low user interaction, Privilege Escalation, high impact on confidentiality, integrity, availability). Connected sourc...

CVE-2026-50494

CVE-2026-50494 is a Windows NTFS vulnerability caused by a heap-based buffer overflow in NTFS handling that can let an authorized, local attacker execute code on the host. The issue affects Windows NTFS components and is being addressed by Microsoft security updates (e.g., KB5099539, KB5099540) r...

CVE-2026-62692

CVE-2026-62692 : Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 vector is LOCAL, LOW exploitability with NONE user interaction and impact on Confidentiality, Integrity, Availability (HIGH) ; base sco...

CVE-2026-62769

CVE-2026-62769 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. The vulnerability arises from a faulty numeric handling (truncation) within the Windows DNS component, enabling local privilege escalation with high impact on confi...

CVE-2026-65781

CVE-2026-65781 is a Windows Autopilot use-after-free causing local privilege escalation for an authorized attacker. Documents do not specify affected build numbers, exact vulnerable component/file, or root-cause details beyond the use-after-free description. No exploitation status or patch/versio...

CVE-2025-58715

CVE-2025-58715 is a Windows Speech vulnerability where an integer overflow/wraparound in the Windows Speech component could enable an authorized, local attacker to elevate privileges. The provided materials identify the affected component as Microsoft Windows Speech and the impact as local privil...

CVE-2026-20871

CVE-2026-20871 refers to a Desktop Window Manager (dwm.exe) use-after-free vulnerability that enables local privilege escalation to SYSTEM. The connected exploit report and advisories describe a DWM-related attack path (Visual‑Field Singularity) affecting the DWM compositor, with PoC/claims of in...

CVE-2026-20921

CVE-2026-20921 is a Windows SMB Server vulnerability described as a race condition in a shared resource that could allow an authenticated attacker to elevate privileges over the network. Connected sources indicate this CVE is listed under Windows SMB Server with an exploitability/impact profile (...

CVE-2026-25173

CVE-2026-25173 concerns Windows RRAS where a module/component used by RRAS may be exploited to achieve remote code execution. The CVE is categorized with CVSS v3.1: base score 8.0 (HIGH), attack Vector: Network, attack Complexity: Low, privileges Required: Low, user Interaction: Required, and imp...

CVE-2026-25180

CVE-2026-25180 describes an out-of-bounds read in the Microsoft Graphics Component that can allow an unauthorized local attacker to disclose information. Connected sources (NVD, CVE listing, ENISA/NCSC advisories) confirm the affected component as Microsoft Graphics Component and the impact as lo...

CVE-2026-27908

CVE-2026-27908 is a Windows Elevation of Privilege vulnerability in the TDI Translation Driver (tdx.sys). The CVSS 3.1 base score is 7.0 (HIGH) with LOCAL attack vector, HIGH impact to confidentiality, integrity, and availability. Exploitation is deemed UNPROVEN and requires LOW privileges with N...

CVE-2026-27916

CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...

CVE-2026-34340

CVE-2026-34340 : Use-after-free in the Windows Projected File System can allow an authorized local attacker to elevate privileges. The provided documents identify the affected component as Windows Projected File System and state the root cause as a use-after-free, with a CVSS v3.1 base score of 7...

CVE-2026-41088

CVE-2026-41088 affects Windows: External control of file name or path in the Windows Ancillary Function Driver for WinSock can allow an authorized local user to elevate privileges. The available connected records corroborate the issue description (Windows WinSock driver path/name control enabling...

CVE-2026-45608

CVE-2026-45608: Out-of-bounds read in Windows DHCP Server enables an authorized, local attacker to disclose information. Documents confirm the affected component as Windows DHCP Server and a local attack vector with low complexity and no privileges required (CVSSv3.1: AV:L/AC:L/PR:N/UI:N/S:U). Ba...

CVE-2026-45642

Microsoft Azure Attestation service and Device Health Attestation Service are affected by improper input validation, allowing an authorized attacker to perform spoofing with a physical attack. CVSS 3.1, base score 3.9 (LOW); attack vector Physical, privileges required High, integrity impact High,...

CVE-2026-48563

CVE-2026-48563 describes a heap-based buffer overflow in the Remote Desktop Client that enables an unauthenticated attacker to execute code over the network. The accompanying metrics indicate a high-severity impact (CVSS 3.1 base score 7.5) with attacker control over network access, requiring use...

CVE-2026-49808

The CVE-2026-49808 entry describes a race condition in the Windows kernel caused by concurrent execution on a shared resource with improper synchronization. An authorized local attacker can elevate privileges, as indicated by the description and CVSS vector (Local attack, High impact to confident...

CVE-2026-50670

CVE-2026-50670 is a Windows Win32k elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows kernel. Connected sources confirm local privilege escalation potential and indicate Microsoft has released updates (e.g., KB5099538/KB5099540; MSRC guidance) addressing this issu...

CVE-2026-50682

CVE-2026-50682 describes an out-of-bounds read in Windows Active Directory (Active Directory Domain Services) that can allow an authorized attacker to cause a denial of service over the network. The description and cross-references in the connected documents confirm the affected component as Wind...

CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...

CVE-2026-61345

CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...

CVE-2026-61361

CVE-2026-61361 is a Use-after-Free vulnerability in the Windows DHCP Client that allows an authorized attacker to execute code locally. Affected: Windows DHCP Client (component of the Windows networking stack). Root cause: use-after-free in the DHCP client process. Impact: high with local access ...

CVE-2026-61927

CVE-2026-61927 documents a use-after-free in Windows Bind Filter Driver that enables an authorized local attacker to elevate privileges. The description specifies local elevation of privilege with high impact across confidentiality, integrity, and availability. The CVSSv3.1 data indicates Local a...

CVE-2026-65814

CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver enabling local privilege escalation for an authorized attacker. Documents provide only the generic impact; no specific affected Windows versions or patch details are available. Exploitation status is not described in the co...

CVE-2025-59507

CVE-2025-59507 affects Windows Speech and is described in connected materials as a race-condition‑driven vulnerability in a Windows Speech component that enables local privilege escalation for an authorized user. The provided sources note an elevated-privileges impact but do not specify the exact...