CVE-2026-25180

CVE-2026-25180 describes an out-of-bounds read in the Microsoft Graphics Component that can allow an unauthorized local attacker to disclose information. Connected sources (NVD, CVE listing, ENISA/NCSC advisories) confirm the affected component as Microsoft Graphics Component and the impact as lo...

CVE-2026-32093

CVE-2026-32093 affects Windows Function Discovery Service (fdwsd.dll). The vulnerability is a race condition due to improper synchronization in shared resource access, enabling an authorized attacker to elevate privileges locally. Public sources (MSRC/MSKB advisories and NCSC) confirm the issue a...

CVE-2026-40380

The CVE-2026-40380 entry describes a heap-based buffer overflow in the Volume Manager Extension Driver that could allow an authorized attacker to execute code under a physical-attack scenario. The NVD entry records a CVSS v3.1 base score of 6.2 (Medium) with impact on confidentiality, integrity, ...

CVE-2026-42986

CVE-2026-42986 describes a use-after-free in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally. Affected: Microsoft Graphics Component; vulnerability class: use-after-free leading to local privilege escalation. Root cause as stated: after-free condi...

CVE-2026-44806

CVE-2026-44806 : Windows Cryptographic Services vulnerability causing denial of service over the network due to missing release of memory after its effective lifetime. Affected component: Windows Cryptographic Services. Root cause described as missing memory release, leading to potential DoS. Rem...

CVE-2026-62692

CVE-2026-62692 : Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 vector is LOCAL, LOW exploitability with NONE user interaction and impact on Confidentiality, Integrity, Availability (HIGH) ; base sco...

CVE-2026-65814

CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver enabling local privilege escalation for an authorized attacker. Documents provide only the generic impact; no specific affected Windows versions or patch details are available. Exploitation status is not described in the co...

CVE-2025-47987

Technical details of CVE-2025-47987 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2025-48805

CVE-2025-48805 describes a heap-based buffer overflow in the Microsoft MPEG-2 Video Extension that could allow an authorized local attacker to execute code. The provided Connected Documents do not supply additional technical details (no vendor, product version, root-cause, specific vulnerable com...

CVE-2025-49679

Technical details about CVE-2025-49679 (affected product/module, root cause, impact, and remediation) are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (KB/SSU) and ENISA EUVD for specifics.

CVE-2025-50161

CVE-2025-50161 is a heap-based buffer overflow affecting Windows Win32K - GRFX. The vulnerability allows an authorized attacker to achieve local privilege escalation. Exploitation requires user interaction and low privileges before escalation. Microsoft has released security updates addressing vu...

CVE-2025-53136

CVE-2025-53136 is listed under Windows NT OS Kernel with a Medium CVSS v3.1 (5.5) and impact described as Access to sensitive data . The connected documents provide the affected product (Windows NT OS Kernel) and impact, but do not disclose root cause details or a specific fix. Public references ...

CVE-2025-54104

CVE-2025-54104 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion (incompatible type) issue that could enable a locally authenticated attacker to elevate privileges. Related connected docs (NCSC) list Defender Firewall Service and classify the impact as ...

CVE-2026-50470

CVE-2026-50470 describes an out-of-bounds read in Windows Network Policy Server SNMP that could let an unauthenticated attacker disclose information over the network. The vulnerability affects the NPS SNMP handling and has a CVSS v3.1 base score of 7.5 (High) with network attack vector, low attac...

CVE-2026-50494

CVE-2026-50494 is a Windows NTFS vulnerability caused by a heap-based buffer overflow in NTFS handling that can let an authorized, local attacker execute code on the host. The issue affects Windows NTFS components and is being addressed by Microsoft security updates (e.g., KB5099539, KB5099540) r...

CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...

CVE-2026-61345

CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62734

CVE-2026-62734 describes a race condition due to concurrent execution with an improper synchronization in the Windows Telephony Service, allowing an authorized attacker to locally elevate privileges. The issue is identified as a local privilege escalation with a high impact on confidentiality, in...

CVE-2026-65790

CVE-2026-65790 is a heap-based buffer overflow in Windows Message Queuing that enables an authorized, locally authenticated attacker to achieve elevation of privilege. Affected component: Windows Message Queuing; root cause: improper heap handling leading to a overflow condition. Impact: local pr...

CVE-2026-65796

CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution . A heap-based buffer overflow in the Windows iSCSI Target Service is the underlying vulnerability, enabling an unauthenticated attacker to execute code remotely over the network. Public sources consistently describe this as a rem...

CVE-2012-2549

CVE-2012-2549 affects the Windows IP-HTTPS component. The IP-HTTPS server in Windows Server 2008 R2, R2 SP1, and Server 2012 does not properly validate certificates, enabling a remote attacker to bypass access restrictions by presenting a revoked certificate. The CVSS base score is 5.8 (Network, ...

CVE-2025-48821

Technical details about CVE-2025-48821 are not provided in the supplied documents. No specific affected products, exploit information, or mitigation are described here; monitor for official updates and published fixes.

CVE-2025-49658

CVE-2025-49658 is an information-disclosure vulnerability in Windows that arises from an out-of-bounds read in the TDX.sys driver. Impact: an authenticated, local attacker with LOW privileges could disclose sensitive data (C: HIGH, I: NONE, A: NONE; CVSS 5.5/LOCAL). Affected component: Windows Tr...

CVE-2025-49669

Technical details about CVE-2025-49669 are not provided in the connected documents. The initial description mentions a heap-based overflow in RRAS but no specific product/version/root-cause/fix details are included here. Monitor for updates.

CVE-2025-49670

Technical details about CVE-2025-49670 (affected software, root cause, impact, and fixes) are not provided in the connected documents; only the initial description is available. Monitor for updates to obtain concrete vulnerability specifics.

CVE-2025-49674

Technical details about CVE-2025-49674 (affected components, root cause, impact or fixes) are not provided in the connected documents. No public exploitation details are included here. Monitor for official updates from Microsoft/NVD for confirmed remediation.

CVE-2025-53808

CVE-2025-53808 is a local privilege-escalation in Windows Defender Firewall Service caused by a type confusion in resource access. Affected: Windows Defender Firewall Service (Windows). Impact and exploitability as per provided metrics: local, high privileges required, none user interaction, conf...

CVE-2025-54915

CVE-2025-54915 describes a type-confusion vulnerability in the Windows Defender Firewall Service that could allow a locally authenticated attacker with high privileges to elevate to a higher level of access. The linked sources confirm the CVE exists and cite Defender Firewall Service as the affec...

CVE-2025-58733

CVE-2025-58733 corresponds to a use-after-free in Inbox COM Objects on Windows that enables local code execution. Connected sources confirm Inbox COM Objects as the vulnerable component and describe the impact as arbitrary code execution by a local attacker. Public advisories from Microsoft and C...

CVE-2025-59275

CVE-2025-59275 involves Windows Authentication Methods with improper validation of a specified input type, enabling an authorized local attacker to escalate privileges. The connected EUVD-2025-34271 entry corroborates the same description. No technical details about affected product versions, roo...

CVE-2026-20816

CVE-2026-20816 is a Windows Installer time-of-check/time-of-use (TOCTOU) race condition that can allow a local user with low privileges to escalate to higher privileges. The connected Nessus entries flag this as affecting Windows Installer and describe the vulnerability as a local privilege escal...

CVE-2026-20875

CVE-2026-20875 is a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) that enables a network-based denial of service. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (Network, Low complexity, No privileges, No user interaction; impact: Avail...

CVE-2026-21231

CVE-2026-21231 describes a race condition in the Windows Kernel involving concurrent execution on a shared resource with improper synchronization, enabling local privilege escalation for an authorized attacker. The vulnerability impact is: local attack vector, requiring low privileges, no user in...

CVE-2026-21238

CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...

CVE-2026-27929

CVE-2026-27929 is a Time-of-check Time-of-use (toctou) race condition in Windows LUAFV (LUA File Virtualization Filter Driver) that enables a locally authenticated attacker to elevate privileges. Red Hat and NCSC advisories confirm the Windows LUAFV vulnerability and its local privilege-escalatio...

CVE-2026-42905

The CVE-2026-42905 entry describes a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to escalate privileges locally. Affected component: Windows DWM Core Library. Root cause: use-after-free condition leading to local privilege escalation. Impact: el...

CVE-2026-42911

CVE-2026-42911 describes a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. The issue permits an authorized local attacker to elevate privileges. The documented impact is local privilege elevation with high severity (CVSSv3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H,...

CVE-2026-45653

CVE-2026-45653: A Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The issue affects kernel code paths susceptible to use-after-free, with an attack vector that is LOCAL, requiring LOW privileges and NO user interaction; the impact per...

CVE-2026-48568

CVE-2026-48568 concerns a protection mechanism failure in Windows Secure Boot that allows a local attacker to bypass a security feature. The connected sources indicate an in-scope vulnerability where an attacker with HIGH privileges and local access can bypass integrity and confidentiality protec...

CVE-2026-56186

CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...

CVE-2025-47984

Technical details about CVE-2025-47984 (affected components, exploitability, root cause, and fix) are not provided in the connected documents. Monitor for updates from MSRC/NVD for concrete context and remediation.

CVE-2025-49676

CVE-2025-49676: heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) over network; initial description provides this; connected documents do not add concrete technical details (affected products/versions, root cause, fix). Monitor for updates.

CVE-2025-54093

CVE-2025-54093 is described as a time-of-check time-of-use (TOCTOU) race in the Windows TCP/IP stack that can enable a locally authenticated attacker to elevate privileges. Connected sources reference this CVE in the context of Windows TCP/IP and note it as a local-privilege-escalation issue, wit...

CVE-2025-54911

CVE-2025-54911 refers to a use-after-free vulnerability in Windows BitLocker that could allow an authorized, locally present attacker to elevate privileges. The CVE entry notes a high-impact scenario with local attack vector, requiring low privileges and user interaction, per the provided CVSS 3....

CVE-2025-59185

CVE-2025-59185 affects Windows Core Shell, enabling spoofing via external control of a file name or path over a network. The connected documents provide general Windows security updates but do not specify a patch or remediation tied to this CVE; no explicit exploitation details are given in the s...

CVE-2026-20927

CVE-2026-20927 affects Windows SMB Server and is described as a race-condition in a shared resource that can allow an authorized attacker to cause a denial of service over the network. The connected Nessus NASL entries list this CVE under Windows SMB Server with a 5.3 base score (Denial-of-Servic...

CVE-2026-27908

CVE-2026-27908 is a Windows Elevation of Privilege vulnerability in the TDI Translation Driver (tdx.sys). The CVSS 3.1 base score is 7.0 (HIGH) with LOCAL attack vector, HIGH impact to confidentiality, integrity, and availability. Exploitation is deemed UNPROVEN and requires LOW privileges with N...

CVE-2026-34333

CVE-2026-34333 describes a use-after-free in Windows Win32K GRFX that enables a locally authenticated user to elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction, affecting confidentiality, int...

CVE-2026-34338

CVE-2026-34338 : Use-after-free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. The publicly provided documents confirm the vulnerability and impact but do not reveal affected Windows versions, exact internal component, or remediation details. The NVD ent...