CVE-2026-50695

CVE-2026-50695 refers to a stack-based buffer overflow in Microsoft Windows Active Directory Federation Services (AD FS) that enables an unauthenticated, remote attacker to cause a denial of service over the network. The vulnerability is described with a CVSS v3.1 base score of 7.5 (HIGH) with at...

CVE-2026-62742

CVE-2026-62742 describes an integer underflow in the Windows DHCP Server that enables an unauthenticated attacker on an adjacent network to disclose information. The affected component is the Windows DHCP Server service, and the underlying cause is a wrap/wraparound underflow. The documented impa...

CVE-2026-62807

CVE-2026-62807 affects Windows DHCP Server, with the root cause described as improper link resolution before file access ("link following"). An authenticated local attacker can elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH): Local attack vector, low attack complexity, low privileges re...

CVE-2025-49762

CVE-2025-49762 describes a race condition caused by concurrent access to a shared resource in the Windows Ancillary Function Driver for WinSock, enabling a locally authenticated attacker to escalate privileges. The description explicitly identifies the affected component and the impact as local p...

CVE-2025-55699

CVE-2025-55699 is listed in the connected NCSC MS security advisories as a Windows Kernel vulnerability with impact described as “Access to sensitive data.” The initial description also notes local disclosure exposure in Windows Kernel. The connected documents do not provide a root-cause detail, ...

CVE-2025-58716

CVE-2025-58716 affects Microsoft Windows Speech and is caused by improper input validation, enabling an authorized attacker to perform local privilege escalation. The CVE is documented with a CVSS v3.1 base score of 8.8 (High) and LOCAL attack vector, requiring LOW privileges and no user interact...

CVE-2025-58732

CVE-2025-58732 is described as a use-after-free in Inbox COM Objects that enables local code execution. The Connected Documents provide broader Windows security updates (KBs and advisories) but do not specify a vendor/product remediation or a patch explicit to this CVE in the provided materials. ...

CVE-2026-20826

CVE-2026-20826 describes a race-condition in the Tablet Windows User Interface (TWINUI) Subsystem. The initial entry asserts an information disclosure/elevation of privileges vector via concurrent access to a shared resource, enabling an authorized attacker to elevate privileges locally. Microsof...

CVE-2026-20836

CVE-2026-20836 is a Windows graphics kernel vulnerability where a race condition in a shared resource allows local privilege elevation. The issue stems from concurrent execution with improper synchronization in the Graphics Kernel. The impact is local privilege escalation (C:H/I:H/A:H per CVSS 3....

CVE-2026-20932

CVE-2026-20932 is a Windows File Explorer information disclosure vulnerability with local access as the attack vector and a CVSS v3.1 base score of 5.5 (Medium). The connected advisories indicate the issue exists in Windows File Explorer and that Microsoft released January 2026 security updates; ...

CVE-2026-23671

CVE-2026-23671 is a Windows Bluetooth RFCOM Protocol Driver elevation of privilege vulnerability. A locally exposed issue could allow an attacker with low privileges and no user interaction to escalate privileges via the Bluetooth stack’s RFCOM Protocol Driver; exploitation maturity is UNPROVEN. ...

CVE-2026-27914

CVE-2026-27914 affects the Microsoft Management Console (MMC). It is an Elevation of Privilege vulnerability where a local attacker with low privileges and no user interaction can potentially gain high impact on confidentiality, integrity, and availability due to the underlying root cause describ...

CVE-2026-27925

CVE-2026-27925 concerns a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that allows an adjacent-network attacker to disclose information. Affected component: Windows UPnP Device Host (upnp.dll). Impact as described: information disclosure with high confidentiality impact; n...

CVE-2026-32084

CVE-2026-32084 is a Windows vulnerability labeled as a Windows Print Spooler information-disclosure issue with local access and potential exposure of sensitive data via Windows File Explorer. The CVE entry notes local attack vector, low attack complexity, and low privileges required, with a high ...

CVE-2026-32150

CVE-2026-32150 is a local privilege-escalation vulnerability in Windows Function Discovery Service (fdwsd.dll) caused by a race condition from concurrent access to a shared resource. An authenticated, local attacker could elevate privileges. Public references indicate the issue is addressed by Mi...

CVE-2026-35423

Technical details (affected product, root cause, impact, or fixes) are not publicly available in the provided documents. Monitor for updates from NVD/EUVD/CVE listings for additional specifics.

CVE-2026-49791

CVE-2026-49791 affects Windows Routing and Remote Access Service (RRAS). The issue is an improper link resolution before file access (link following) that can allow an authorized, local attacker to elevate privileges. The vulnerability is triggered locally with low attack complexity and low privi...

CVE-2026-50355

CVE-2026-50355 is a vulnerability in Active Directory Federation Services (AD FS) described as a stack-based buffer overflow that enables a remote, unauthenticated attacker to cause a denial of service over the network. The CVSS v3.1 base score is 7.5 (Network, Low attack complexity, No privilege...

CVE-2026-50358

CVE-2026-50358 is a Windows Media use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free in Windows Media code path. Impact: local privilege escalation with high severity as per Microsoft guid...

CVE-2026-58610

CVE-2026-58610: A heap-based buffer overflow in Microsoft Windows Media Foundation is described as allowing an unauthorized attacker to execute code locally. The NVD entry confirms the vulnerability and impact (local code execution) with a CVSS 3.1 base score of 7.8 (HIGH) and a local attack vect...

CVE-2025-53719

CVE-2025-53719 affects Windows Routing and Remote Access Service (RRAS); an uninitialized resource in RRAS can allow an authorized network attacker to disclose information. The issue is tied to RRAS in Windows, with CVSS v3.1 base score 5.7 (Network, Low attack complexity, Privileges required: Lo...

CVE-2025-53804

CVE-2025-53804 affects the Windows Kernel and involves exposure of sensitive information to an unauthorized actor, allowing local disclosure. The threat is categorized with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with low complexity, where privileges are low and no user i...

CVE-2025-54102

CVE-2025-54102 is a use-after-free in the Windows Connected Devices Platform Service that allows an authenticated, local attacker to escalate privileges (obtain increased entitlements). The connected documents corroborate the local-privilege-escalation impact (NCSC advisory lists CVE-2025-54102 w...

CVE-2025-58739

CVE-2025-58739 affects Windows File Explorer and is described as the exposure of sensitive information to an unauthorized actor, enabling spoofing over a network. The CVSS 3.1 base score is 6.5 (Network, Low attack complexity, No privileges, User interaction required) with Confidentiality impact ...

CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2025-59517

CVE-2025-59517 is a Windows Storage VSP Driver elevation of privilege vulnerability caused by improper access control. Exploitation would enable a locally authenticated attacker to elevate privileges on affected Windows systems. Connected documents confirm this is tied to the Windows Storage VSP ...

CVE-2025-62474

CVE-2025-62474 is a Windows Remote Access Connection Manager Elevation of Privilege vulnerability. It involves improper access control in the Remote Access Connection Manager, enabling a locally authenticated attacker (low privileges, no user interaction) to obtain elevated rights. CVSS v3.1 base...

CVE-2025-64661

CVE-2025-64661 – Windows Shell Elevation of Privilege is supported by connected sources. The vulnerability involves a race condition in concurrent execution using a shared resource in Windows Shell, allowing an authorized local attacker to elevate privileges. Connected documents confirm impact as...

CVE-2026-21508

CVE-2026-21508 concerns improper authentication in Windows Storage, enabling a locally authenticated attacker to elevate privileges. The CVSS v3.1 base score is 7.0 (HIGH), with LOCAL attack vector, HIGH impact on confidentiality, integrity, and availability, and a HIGH attack complexity requirin...

CVE-2026-24285

Technical details about CVE-2026-24285 are not provided in the given documents. Monitor for updates from Microsoft and CVE records for affected products, impact, and mitigations.

CVE-2026-27911

Technical details not publicly available in the provided documents. Monitor for updates on affected products, vulnerable component, impact, and remediation.

CVE-2026-32083

CVE-2026-32083 pertains to Windows’ Simple Search and Discovery Protocol (SSDP) Service elevation of privilege. The vulnerability is local, with low privileges required and no user interaction, and yields a high impact on confidentiality, integrity, and availability. Microsoft lists an official f...

CVE-2026-49171

The CVE-2026-49171 entry describes a Use-After-Free vulnerability in Windows Speech Runtime that enables a locally authenticated attacker to elevate privileges. Affected: Microsoft Windows Speech Runtime components; root cause: use-after-free leading to arbitrary code or privilege escalation (det...

CVE-2026-49797

CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.

CVE-2026-50311

CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...

CVE-2026-50331

CVE-2026-50331 is a Windows Application Model Core API elevation-of-privilege vulnerability caused by a use-after-free issue. It affects the Windows Application Model Core API component and allows an authorized attacker with local access to elevate privileges. Microsoft has issued updates to addr...

CVE-2026-50337

CVE-2026-50337 is a Windows Notification vulnerability described as an issue with an incorrect type conversion or cast that allows an authorized attacker to achieve local privilege escalation. The CVE is listed with a CVSS v3.1 base score of 7.8 (HIGH), indicating a local attack vector with low c...

CVE-2026-50417

CVE-2026-50417 is a Windows NTFS heap-based buffer overflow that could allow an authenticated, local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components and is described as a local, privilege-leveraging scenario with HIGH impact (CVE-3.1, base score 7.8). Connect...

CVE-2026-50421

CVE-2026-50421 is a Windows vulnerability in Windows Connected User Experiences and Telemetry described as a local privilege escalation via a resource access type confusion. The CVE entry is supported by multiple records: NVD/NCSC/CIRCL indicate the issue and Microsoft has released updates to add...

CVE-2026-50476

Microsoft Windows CVE-2026-50476 is a local privilege-escalation vulnerability in the Windows Network Connections Service caused by a use-after-free. Affected component is the Windows Network Connections Service; root cause is a use-after-free condition that enables an authorized attacker to elev...

CVE-2026-54132

CVE-2026-54132: Heap-based buffer overflow in the Windows Kernel can enable privilege escalation with physical access. Documents consistently describe an attacker who gains local, physical access to exploit the heap overflow to elevate privileges. The described impact is local elevation of privil...

CVE-2026-57093

CVE-2026-57093 – Windows Ancillary Function Driver for WinSock is a reported use-after-free vulnerability in the WinSock ancillary function driver that can be exploited locally to achieve privilege escalation. The issue affects the specific Windows driver handling WinSock operations; successful e...

CVE-2025-49761

CVE-2025-49761 is a Windows Kernel local privilege escalation (Use-after-free) vulnerability. The connected data confirms an effect: “Obtaining elevated privileges” with CVSS v3.1 base metrics indicating LOCAL, low attack complexity and privileges required, high impact to confidentiality/integrit...

CVE-2025-53153

Technical details about CVE-2025-53153 (RRAS information disclosure) are not provided in the connected documents; available sources only reiterate the use of an uninitialized resource in RRAS. Monitor for updates.

CVE-2025-58737

CVE-2025-58737 is a Windows Remote Desktop Protocol (RDP) Remote Code Execution vulnerability described as a use-after-free in the Remote Desktop implementation that allows a local attacker to execute code. The CVE entry shows a base score of 7.0 (HIGH) with LOCAL access, HIGH confidentiality/int...

CVE-2026-21222

CVE-2026-21222 is a Windows Kernel information-disclosure vulnerability where insertion of sensitive data into a kernel log file could allow a locally authenticated attacker with LOW privileges to read sensitive data (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The connected sources confirm t...

CVE-2026-25166

CVE-2026-25166 /Windows System Image Manager ADK: A.local, low-privilege, no-user-interaction remote code execution vulnerability with high impact (C/H/I/A) per CVSS 3.1; fix is an official update. Exploitation details are not provided in the document.

CVE-2026-50347

CVE-2026-50347 is a Windows Data.dll vulnerability characterized by a heap-based buffer overflow that allows an unauthorized, local attacker to execute code. The affected component is Windows Data.dll; the underlying issue is a heap overflow leading to remote-code-execution-style impact via local...

CVE-2026-50435

CVE-2026-50435 (Windows Overlay Filter): A buffer over-read in the Windows Overlay Filter enables a locally authenticated attacker to elevate privileges. The exploitation context is local with low attack complexity and no user interaction, and the impact is elevation of privileges with high confi...

CVE-2026-50504

CVE-2026-50504 is a buffer over-read affecting the Windows Remote Desktop Client that can disclose information to an unauthenticated, network-attached attacker. The description and linked CVE entries consistently indicate the underlying issue is a buffer over-read in the Remote Desktop Client, en...