CVE-2026-21251

CVE-2026-21251 describes a use-after-free in the Windows Cluster Client Failover, enabling a locally authenticated attacker to achieve privilege elevation. The CVSS 3.1 base score is 7.8 (HIGH) with local attack vector, low complexity, and low privileges required; confidentiality, integrity, and ...

CVE-2026-26180

CVE-2026-26180 is a Windows kernel local elevation of privilege issue. The vulnerability affects the Windows kernel with a local attacker able to gain HIGH impact on confidentiality, integrity, and availability. Exploitation is LOCAL with LOW complexity and LOW privileges required, and no user in...

CVE-2026-27919

CVE-2026-27919 is a Windows UPnP Device Host elevation-of-privilege vulnerability. It is a local attack with low privileges required and no user interaction, carrying a CVSS v3.1 base score of 7.8 (High). The impact spans confidentiality, integrity, and availability (all High). The exploitation m...

CVE-2026-32093

CVE-2026-32093 affects Windows Function Discovery Service (fdwsd.dll). The vulnerability is a race condition due to improper synchronization in shared resource access, enabling an authorized attacker to elevate privileges locally. Public sources (MSRC/MSKB advisories and NCSC) confirm the issue a...

CVE-2026-32151

CVE-2026-32151 is a Windows Shell information disclosure vulnerability. The entry shows a network-based exploit with low privileges required and no user interaction, and a high impact on confidentiality (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6.5). The official fix is noted as ...

CVE-2026-40408

CVE-2026-40408 is described as a use-after-free in Windows kernel-mode drivers that enables local privilege escalation for an authenticated attacker. The provided documents consistently state local elevation of privileges but do not specify the affected products, driver components, or vulnerable ...

CVE-2026-45636

The CVE-2026-45636 entries describe a heap-based buffer overflow in Windows NTFS that can allow an unauthenticated attacker to achieve local code execution. Affected software is Windows NTFS (filesystem driver). The underlying cause is a heap-based overflow; impact is high (CVE metrics show Local...

CVE-2026-45653

CVE-2026-45653: A Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The issue affects kernel code paths susceptible to use-after-free, with an attack vector that is LOCAL, requiring LOW privileges and NO user interaction; the impact per...

CVE-2026-50474

CVE-2026-50474 is a Remote Desktop Client vulnerability described as a use-after-free that allows an unauthenticated attacker to execute code over a network. The affected component is the Remote Desktop Client; the root cause is use-after-free in the client handling of remote sessions. The CVE is...

CVE-2025-50155

CVE-2025-50155 corresponds to a local privilege-escalation vulnerability in Windows Push Notifications. Affected component: Windows Push Notifications service. Root cause: access of a resource using an incompatible type (type confusion). Impact: authorized attacker on the same device can escalate...

CVE-2025-53153

Technical details about CVE-2025-53153 (RRAS information disclosure) are not provided in the connected documents; available sources only reiterate the use of an uninitialized resource in RRAS. Monitor for updates.

CVE-2025-53724

CVE-2025-53724 is a Windows Push Notifications vulnerability described as a type confusion that allows an authorized, locally authenticated attacker to elevate privileges. The CVE is linked to Windows Push Notifications and is rated with a base score of 7.8 (HIGH) via CVSS 3.1, with attack vector...

CVE-2025-53798

CVE-2025-53798 affects Windows Routing and Remote Access Service (RRAS). The connected sources confirm a buffer over-read that enables an unauthenticated attacker to disclose information over the network (CVE-2025-53798; CVSS v3.1 base score 6.5, network vector, low attack complexity, no privileg...

CVE-2025-53810

CVE-2025-53810 describes a type confusion vulnerability in Windows Defender Firewall Service that allows an authorized local attacker to escalate privileges. The connected NC SC/ENISA-style document confirms the affected component as Windows Defender Firewall Service and lists the impact as obtai...

CVE-2025-54097

CVE-2025-54097 is an information-disclosure vulnerability in Windows Routing and Remote Access Service (RRAS) caused by an out-of-bounds read. It can allow an unauthenticated attacker to disclose information over a network. The CVE is listed in multiple sources (NVD, CVE List) with RRAS-specific ...

CVE-2025-54894

CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.

CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2025-62474

CVE-2025-62474 is a Windows Remote Access Connection Manager Elevation of Privilege vulnerability. It involves improper access control in the Remote Access Connection Manager, enabling a locally authenticated attacker (low privileges, no user interaction) to obtain elevated rights. CVSS v3.1 base...

CVE-2026-26160

CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...

CVE-2026-32085

CVE-2026-32085 affects Windows Remote Procedure Call and corresponds to an information-disclosure vulnerability that can allow an authenticated local attacker to read sensitive data. The NVD/NCSC/MSRC entries confirm this vulnerability and note that Microsoft has released updates to fix the issue...

CVE-2026-32214

Technical details about CVE-2026-32214 are not provided in the given documents. No explicit affected products, vulnerable components, impact, or remediation details are disclosed here. Monitor for updates from official sources.

CVE-2026-34331

CVE-2026-34331 involves a race condition in the Windows Win32K GRFX subsystem caused by concurrent access to a shared resource with improper synchronization. This leads to local privilege escalation by an authorized attacker. The provided documents state the issue and impact but do not include ex...

CVE-2026-34351

CVE-2026-34351 describes a race condition in Windows TCP/IP where concurrent access to a shared resource allows an authorized attacker to elevate privileges locally. The provided description states a local, privilege-escalation risk with a high impact on confidentiality, integrity, and availabili...

CVE-2026-50366

CVE-2026-50366 describes a Denial of Service in Windows Active Directory Domain Services caused by a null pointer dereference. The vulnerability is exploitable over the network with no user interaction, requiring low privileges and network access from an authenticated attacker; the impact is deni...

CVE-2026-58614

An out-of-bounds read in the Windows Kernel allows an authorized, local attacker to bypass a security feature. The CVE-2026-58614 entry notes a local vector with Privileges Required: Low and no user interaction, Confidentiality Impact: High, Impact on Availability/Integrity: none, giving a CVSS v...

CVE-2025-49761

CVE-2025-49761 is a Windows Kernel local privilege escalation (Use-after-free) vulnerability. The connected data confirms an effect: “Obtaining elevated privileges” with CVSS v3.1 base metrics indicating LOCAL, low attack complexity and privileges required, high impact to confidentiality/integrit...

CVE-2025-53138

CVE-2025-53138 affects Windows Routing and Remote Access Service (RRAS). The issue is caused by use of an uninitialized resource, enabling an authorized network attacker to disclose information over the network. The connected RRAS entries corroborate that this CVE is present and assign a CVSS v3....

CVE-2025-53719

CVE-2025-53719 affects Windows Routing and Remote Access Service (RRAS); an uninitialized resource in RRAS can allow an authorized network attacker to disclose information. The issue is tied to RRAS in Windows, with CVSS v3.1 base score 5.7 (Network, Low attack complexity, Privileges required: Lo...

CVE-2025-53725

Technical details about CVE-2025-53725 are not provided in the connected documents. Public exposure, affected components, and fixes are not described here; monitor for updates.

CVE-2025-53801

CVE-2025-53801 is a Windows DWM core library elevation-of-privilege vulnerability described as an untrusted pointer dereference that enables a locally authenticated attacker to achieve elevation of privileges . The CVE is associated with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vect...

CVE-2025-54102

CVE-2025-54102 is a use-after-free in the Windows Connected Devices Platform Service that allows an authenticated, local attacker to escalate privileges (obtain increased entitlements). The connected documents corroborate the local-privilege-escalation impact (NCSC advisory lists CVE-2025-54102 w...

CVE-2025-55225

CVE-2025-55225 affects Windows Routing and Remote Access Service (RRAS). The vulnerability is an out-of-bounds read that enables an unauthenticated, remote attacker to disclose information over the network. In the connected NCSC document, RRAS entries list CVE-2025-55225 with impact: Access to se...

CVE-2025-62452

Technical details about CVE-2025-62452 (heap-based buffer overflow in RRAS) are not publicly provided in the supplied documents. The connected KB/MS documents do not specify affected products/versions, exploit details, or mitigations. Monitor for updates.

CVE-2025-62466

CVE-2025-62466 : Windows Client-Side Caching (CSC) Service contains a null pointer dereference vulnerability that allows an authenticated local attacker to escalate privileges . The issue is tied to CSC on Windows and is listed in multiple advisories as a privilege-elevation vulnerability affecti...

CVE-2026-20928

CVE-2026-20928 affects Windows Recovery Environment Agent. Root cause: improper removal of sensitive information before storage/transfer. Impact: allows bypass of a security feature with physical access; confidentiality is impacted. Affected product: Windows Recovery Environment Agent component. ...

CVE-2026-25172

CVE-2026-25172 concerns Windows Routing and Remote Access Service (RRAS). The RRAS integer overflow/wraparound vulnerability allows an authenticated attacker to execute code over a network. Connected advisories confirm this affects RRAS and note that Microsoft released updates to fix the vulnerab...

CVE-2026-27930

CVE-2026-27930 is a Windows GDI information disclosure vulnerability. The CVSSv3.1 base score is 5.5 (Medium); attack is LOCAL, requires user interaction, and does not affect integrity or availability, but threatens confidentiality HIGH. The record notes an OFFICIAL_FIX remediation level, implyin...

CVE-2026-32070

CVE-2026-32070 affects Windows where the Common Log File System Driver contains an elevation-of-privilege flaw. The root cause is not explicitly described in the provided text, but the CVSS 3.1 metrics indicate a local attack vector with high impact on confidentiality, integrity, and availability...

CVE-2026-32079

CVE-2026-32079 is a Web Account Manager information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (MEDIUM). It is exploitable locally with low attack complexity and low privileges required; user interaction is not required. The confidentiality impact is HIGH, while integrity and avai...

CVE-2026-34343

CVE-2026-34343 describes a heap-based buffer overflow in Windows’ Application Identity (AppID) Subsystem that could enable local privilege escalation by an authorized attacker. Documented impact is local, with required privileges LOW and no user interaction, consistent with CVSS v3.1 base metrics...

CVE-2026-48573

CVE-2026-48573 describes a protection mechanism failure in Windows Secure Boot allowing an authorized attacker to bypass a security feature locally. The NVD entry notes a local attack vector with high impact on confidentiality and integrity (C:H/I:H) and a CVSS v3.1 base score of 7.9. Connected d...

CVE-2026-50409

CVE-2026-50409 affects the Windows Overlay Filter. The issue is an information disclosure where an authorized attacker can locally access sensitive information exposed by the Overlay Filter. The base CVSS v3.1 is 5.5 (Local, Low Attack Complexity, Low Privileges) with High confidentiality impact....

CVE-2026-50451

CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...

CVE-2025-49762

CVE-2025-49762 describes a race condition caused by concurrent access to a shared resource in the Windows Ancillary Function Driver for WinSock, enabling a locally authenticated attacker to escalate privileges. The description explicitly identifies the affected component and the impact as local p...

CVE-2025-50160

CVE-2025-50160 maps to a Windows RRAS heap-based buffer overflow that enables remote code execution. The vulnerability affects RRAS and is described in public sources as allowing an authenticated, network-based attacker to execute code with low privileges and user interaction required. The connec...

CVE-2025-53135

CVE-2025-53135 is a race-condition based local privilege-escalation in the Windows DirectX graphics stack. Public description indicates concurrent execution on a shared resource allows an authorized, locally authenticated user to elevate privileges. The CVE is listed in Windows DirectX entries as...

CVE-2025-53804

CVE-2025-53804 affects the Windows Kernel and involves exposure of sensitive information to an unauthorized actor, allowing local disclosure. The threat is categorized with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with low complexity, where privileges are low and no user i...

CVE-2025-55325

CVE-2025-55325 is a Buffer over-read in the Windows Storage Management Provider that enables an attacker with local access to disclose information. The CVE entry lists a CVSS v3.1 base score of 5.5 (Medium) with local attack vector and low attack complexity; confidentiality impact is High, others...

CVE-2025-60705

Technical details about CVE-2025-60705 (affected product, root cause, impact, or Fix) are not provided in the connected documents. Monitor for updates from Microsoft/MSRC for validation, impact, and remediation.

CVE-2025-64661

CVE-2025-64661 – Windows Shell Elevation of Privilege is supported by connected sources. The vulnerability involves a race condition in concurrent execution using a shared resource in Windows Shell, allowing an authorized local attacker to elevate privileges. Connected documents confirm impact as...