CVE-2026-32215

CVE-2026-32215 is a Windows Kernel information-disclosure vulnerability caused by insertion of sensitive data into a log file, enabling an authenticated, local attacker to disclose information. Affected component is the Windows Kernel logging path; the described impact is local confidentiality br...

CVE-2026-32224

The CVE-2026-32224 entry concerns Windows Server Update Services (WSUS) with an Elevation of Privilege vulnerability. The CVSS metrics indicate a LOCAL attack vector, requiring LOW privileges and HIGH impact on confidentiality, integrity, and availability, with a HIGH attack complexity and no use...

CVE-2026-50384

CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...

CVE-2026-50392

CVE-2026-50392 is a use-after-free vulnerability in Windows Secure Kernel Mode that enables an authorized, local attacker to elevate privileges. Connected sources identify the flaw in the Windows Secure Kernel Mode and confirm exploitation would occur locally with elevated impact to confidentiali...

CVE-2026-50687

CVE-2026-50687 is a Windows Win32k local privilege-escalation vulnerability caused by a use-after-free in the Windows Kernel. It affects the Win32k subsystem and enables an authenticated attacker to elevate privileges locally (base CVSS v3.1 score 8.8, vector: LOCAL, LOW complexity, LOW privilege...

CVE-2026-58533

CVE-2026-58533 is listed as a Windows Remote Desktop Client information-disclosure vulnerability stemming from the use of an uninitialized resource in the Windows RDP client. Connected sources confirm the affected component is the Windows Remote Desktop Client and describe the impact as unauthori...

CVE-2026-58547

CVE-2026-58547 is a Windows UPnP Device Host vulnerability. The issue is a heap-based buffer overflow in upnp.dll that allows an authenticated local attacker to elevate privileges. The NVD entry and multiple advisories describe the root cause as a heap overflow in UPnP device host, with CVSS deta...

CVE-2026-24289

Technical details about CVE-2026-24289 are not provided in the documents; no affected products, vulnerable components, impact, or remediation details are listed here. Monitor for updates.

CVE-2026-26163

CVE-2026-26163 is a Windows Kernel elevation-of-privilege vulnerability described as a double free allowing an authorized local attacker to escalate privileges. Connected sources confirm the affected surface is Windows Kernel and the issue enables local privilege escalation with high impact. The ...

CVE-2026-27911

Technical details not publicly available in the provided documents. Monitor for updates on affected products, vulnerable component, impact, and remediation.

CVE-2026-32158

CVE-2026-32158 is a race-condition vulnerability in Windows Push Notifications (Windows Push Notification Core) where concurrent access to a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The issue arises from a race between processes/thre...

CVE-2026-32195

CVE-2026-32195 is a Windows Kernel elevation-of-privilege issue caused by a stack-based buffer overflow. Connected documents confirm affected software as Windows Kernel and describe the impact as local privilege escalation. Exploitation details are not provided in the sources, and no fixed versio...

CVE-2026-45654

Technical details about CVE-2026-45654 are not publicly available in the provided documents. Monitor for updates from the NVD/CVE records for affected products, root cause specifics, impact, and remediation.

CVE-2026-49787

The CVE-2026-49787 entry describes a Denial of Service vulnerability in Windows HTTP.sys caused by allocation of resources without limits or throttling, leading to an unauthorized network-based disruption. Affected component is HTTP.sys on Windows; impact is availability (denial of service) with ...

CVE-2026-49797

CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.

CVE-2026-50322

CVE-2026-50322 is a Windows Runtime elevation-of-privilege vulnerability caused by a race condition due to improper synchronization when accessing a shared resource. Multiple sources confirm the issue exists in Windows Runtime and enables a locally authenticated attacker to elevate privileges. Th...

CVE-2026-50349

A race condition (concurrent execution using a shared resource with improper synchronization) in the Windows Ancillary Function Driver for WinSock allows an authorized attacker with low privileges to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with high impact on c...

CVE-2026-50462

CVE-2026-50462 affects the Windows Ancillary Function Driver for WinSock. The disclosed issue is external control of a file name or path, enabling an authorized attacker to elevate privileges locally (local privilege escalation). CVSS v3.1 score is 7.8 (High) with Privileges: Low, User Interactio...

CVE-2026-57097

CVE-2026-57097 describes an Untrusted search path in Microsoft XML that allows a physical attacker to bypass a security feature. Affects Microsoft XML; impact is described as high for confidentiality, integrity, and availability with a physical attack requiring no user interaction. No exploit det...

CVE-2026-58632

CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...

CVE-2026-58635

CVE-2026-58635 is a Windows Narrator Braille elevation-of-privilege vulnerability caused by improper neutralization of special elements used in a command. Exploitation is local, requires low privileges, and does not require user interaction; successful exploitation yields high impact to confident...

CVE-2026-24290

CVE-2026-24290 concerns the Windows Projected File System and is an Elevation of Privilege vulnerability. The CVE shows a LOCAL attack vector with LOW privileges required and NONE user interaction, with impacts on confidentiality, integrity, and availability rated as High. The metric set indicate...

CVE-2026-25186

Technical details not publicly available in the provided documents. Monitor for updates.

CVE-2026-32152

CVE-2026-32152 is a use-after-free in Desktop Window Manager that allows an authenticated, local attacker to elevate privileges. Microsoft has issued multiple security updates addressing this vulnerability across Windows SKUs (e.g., KB5082142 for Server 2022, KB5082052 for Windows 11 23H2, KB5083...

CVE-2026-40422

CVE-2026-40422 concerns Windows File Explorer where an uninitialized resource leads to local information disclosure. The affected component is File Explorer; the underlying issue is an uninitialized resource, enabling an authorized user with local access (low privilege, no user interaction) to di...

CVE-2026-49173

CVE-2026-49173 describes a use-after-free in the Windows Kernel that enables a locally authenticated attacker to elevate privileges. The vulnerability is rooted in a memory-management flaw within the kernel; no specific affected Windows versions, patches, or remediation steps are provided in the ...

CVE-2026-50342

The CVE-2026-50342 entry describes an improper access control flaw in the Windows MIDI Service Module that enables a locally authenticated attacker to elevate privileges. The CVSS3.1 base score is 8.8 (High) with Local attack vector, Low attack complexity, Low privileges required, and No user int...

CVE-2026-50420

CVE-2026-50420 affects Windows HTTP.sys. It is an out-of-bounds read in HTTP.sys that can allow a local, unauthenticated attacker to disclose information. The CVE is listed with a CVSS v3.1 base score of 6.2 (Medium) and requires local access with no user interaction. Public references show multi...

CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...

CVE-2026-58537

CVE-2026-58537 (Microsoft NAT Helper Components, ipnathlp.dll) is a use-after-free vulnerability that allows an authenticated local attacker to achieve elevation of privileges. The connected sources confirm the flaw and its local-privilege-impact, with Microsoft and CVE listings documenting ipnat...

CVE-2026-58609

The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...

CVE-2026-32159

CVE-2026-32159 affects Windows Push Notifications. The issue is a local elevation-of-privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH). Attack requires local access, high attack complexity, and low privileges, with no user interaction, and can impact confidentiality, integrity, an...

CVE-2026-32219

CVE-2026-32219 is a Microsoft-related local privilege escalation in the brokering file system. The entry cites a local attack vector with high impact on confidentiality, integrity, and availability, requiring low privileges and no user interaction; exploitation is marked as UNPROVEN and the remed...

CVE-2026-49789

CVE-2026-49789 is a Windows NTFS elevation-of-privilege vulnerability. A stack-based buffer overflow in NTFS could allow an authorized local attacker to escalate privileges. Affected component: Windows NTFS subsystem. Root cause: stack-based overflow in an NTFS operation, leading to potential cod...

CVE-2026-49807

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-50674

CVE-2026-50674 describes a use-after-free vulnerability in the Windows USB Print Driver that can be exploited by an authenticated local attacker to escalate privileges. The issue affects the Windows USB Print Driver component and is triggered by a use-after-free condition in processing USB print ...

CVE-2026-25174

CVE-2026-25174 is a Windows Privilege Elevation vulnerability described as an out-of-bounds read in the Windows Extensible File Allocation feature. The connected NCSC advisory confirms Microsoft has fixed vulnerabilities across Windows components, listing CVE-2026-25174 under Windows Extensible F...

CVE-2026-26162

CVE-2026-26162 is a Windows OLE vulnerability described as a type-confusion in resource access that enables a locally authenticated attacker to elevate privileges. The Red Hat and NVD/NCSC entries confirm the same issue, with Microsoft’s MSRC entry associating it to Windows OLE and listing Window...

CVE-2026-27931

CVE-2026-27931 : Windows GDI contains an out-of-bounds read vulnerability that allows a local, unprivileged attacker to disclose information. Affected component: Windows GDI. Root cause: read past buffer bounds in GDI. Impact: local information disclosure of sensitive data. Exploitation status: n...

CVE-2026-50344

CVE-2026-50344 corresponds to an Windows OLE elevation-of-privilege vulnerability. Description from sources: “Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.” Exploitation details are not provided beyond that this is a local privilege escalation ...

CVE-2026-54993

CVE-2026-54993 describes a heap-based buffer overflow in Microsoft Windows Media Foundation that could allow a local attacker to execute code on a vulnerable system. The public descriptions in the provided documents identify the affected component as Windows Media Foundation, with the vulnerabili...

CVE-2026-58539

CVE-2026-58539 is a Windows Remote Desktop Client/RDP vulnerability described as an out-of-bounds read that could allow an unauthenticated attacker to disclose information over a network. The connected documents corroborate this as a Windows RDP/Remote Desktop Client issue with public advisories ...

CVE-2026-58542

CVE-2026-58542 is a heap-based buffer overflow in Windows Media that could allow a local attacker to execute arbitrary code. Affected components include Windows Media and related Media Foundation code paths; the vulnerability is exploitable with local access and has a high impact (code execution)...

CVE-2026-62723

CVE-2026-62723 is a use-after-free vulnerability in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The NVD entry and CVE records confirm a local exploit path with low privileges required and no user interaction, with a CVSSv3.1 base score of 7.0 (High)...

CVE-2026-49168

CVE-2026-49168 is an elevation-of-privilege vulnerability in Windows Storage Spaces Direct caused by an integer overflow/wraparound. The issue, exploitable with physical access, allows an unauthenticated attacker to gain high-impact effects (confidentiality, integrity, and availability). CVSSv3.1...

CVE-2026-49802

CVE-2026-49802 affects the Windows USB Print Driver. It arises from concurrent execution using a shared resource with improper synchronization (a race condition), enabling a locally privileged attacker to elevate privileges. The CVSS v3.1 base score is 7.0 (High) with local attack vector, high im...

CVE-2026-50406

CVE-2026-50406 affects Windows Backup Engine with a use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Connected sources confirm the issue exists in Windows Backup Engine and describe local privilege escalation as the impact, with Microsoft issuing u...

CVE-2026-57085

CVE-2026-57085 is a Windows Print Spooler vulnerability described as an out-of-bounds read in Print Spooler Components that allows an authorized, local attacker to disclose information. Connected sources confirm the affected component and local disclosure impact, with Microsoft and CVE trackers n...

CVE-2026-58535

CVE-2026-58535 affects the Windows Remote Desktop Client. The root cause is a use of an uninitialized resource in Windows RDP, enabling an unauthenticated, network-based disclosure of information. Public data from NVD lists CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base score 7...

CVE-2026-58543

CVE-2026-58543 corresponds to a race condition in the Windows USB Print Driver (shared resource synchronization) that can allow an authorized attacker with physical access to elevate privileges. The NVD entry states concurrent execution with improper synchronization in the Windows USB Print Drive...