CVE-2026-54107

The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...

CVE-2026-57087

CVE-2026-57087 is a Windows Media Foundation remote code execution vulnerability caused by a heap-based buffer overflow in Windows Media Foundation. An unauthenticated attacker could trigger code execution over a network. Public sources confirm the flaw affects Windows Media/Media Foundation comp...

CVE-2026-62774

Technical details are not publicly available in the provided documents for CVE-2026-62774. Monitor for updates on affected products, impact, and remediation.

CVE-2026-62813

CVE-2026-62813 is a use after free vulnerability in Windows Active Directory Domain Services (AD DS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with high complexity and no user interaction required. No expl...

CVE-2026-69381

CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...

CVE-2026-69547

CVE-2026-69547 is a heap-based buffer overflow in Windows DHCP Server that allows an authorized attacker to execute code over a network. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting a network attack vector, low attack complexity, low privileges required, and high impact to con...

CVE-2026-69607

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...

CVE-2025-49666

CVE-2025-49666 is a Windows Kernel flaw described as a heap-based buffer overflow that enables remote code execution by an authorized attacker over a network. Public data lists attack vector as Network with high impact to confidentiality, integrity, and availability, and requires HIGH privileges ...

CVE-2025-49688

Public documents provided do not contain additional technical details (affected product/version, root cause, remediation) beyond the initial description. Monitor for updates from the listed sources as new information becomes available.

CVE-2025-50158

CVE-2025-50158 is a TOCTOU race condition in Windows NTFS that could allow a local attacker to disclose information. The description confirms the vulnerability is a local information-disclosure flaw affecting NTFS. Connected sources list CVE-2025-50158 under Windows NTFS with an impact of Access ...

CVE-2025-53148

CVE-2025-53148 affects Windows Routing and Remote Access Service (RRAS); the issue is described as an information disclosure due to use of an uninitialized resource. Connected sources confirm RRAS involvement and show that Microsoft released updates to fix Windows vulnerabilities, including RRAS-...

CVE-2025-53801

CVE-2025-53801 is a Windows DWM core library elevation-of-privilege vulnerability described as an untrusted pointer dereference that enables a locally authenticated attacker to achieve elevation of privileges . The CVE is associated with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vect...

CVE-2025-53806

CVE-2025-53806 describes a buffer over-read in Windows Routing and Remote Access Service (RRAS) that could allow an unauthenticated, remote attacker to disclose information over the network. The provided documents confirm the vulnerability description and network-exposure, but do not include expl...

CVE-2025-54095

CVE-2025-54095 is an information-disclosure vulnerability in Windows Routing and Remote Access Service (RRAS) characterized by an out-of-bounds read that could allow an unauthenticated attacker to disclose data over the network. Public materials in the connected documents show RRAS as the affecte...

CVE-2025-54099

CVE-2025-54099 affects the Windows Ancillary Function Driver for WinSock. The issue is a stack-based buffer overflow that can be exploited by an authorized, locally-located attacker to obtain elevated privileges. The connected NCSC advisory corroborates the CVE’s association with privilege escala...

CVE-2025-62573

CVE-2025-62573 is a DirectX Graphics Kernel elevation-of-privilege vulnerability described as a use-after-free in Windows DirectX that enables an authorized, local attacker to obtain elevated privileges. The EUVD and related advisories confirm the issue and map it to a Windows DirectX privilege e...

CVE-2026-20814

CVE-2026-20814 is a local privilege-escalation in the Microsoft Graphics Kernel caused by a race condition when accessing a shared resource. An authorized local attacker could elevate privileges on affected Windows systems. The issue is documented in multiple sources (e.g., CVE lists and ENISA EU...

CVE-2026-20869

CVE-2026-20869 affects Windows Local Session Manager (LSM) and is described as a race-condition vulnerability in the management of a shared resource that allows an authenticated, local attacker to elevate privileges. The initial CVE entry cites local privilege escalation with a high impact. Micro...

CVE-2026-20872

CVE-2026-20872 affects Windows NTLM: external control of a file name or path allows an attacker to spoof authentication over the network. The description states this vulnerability and related references indicate a Windows NTLM spoofing risk. The connected Nessus/NCSC/EUVD/NVD entries confirm the ...

CVE-2026-21235

CVE-2026-21235 describes a use-after-free vulnerability in Microsoft Graphics Component that can allow an authorized attacker to elevate privileges locally. Reported CVSS v3.1Base score 7.3 (HIGH) with LOCAL attack vector, low attack complexity, requiring user interaction and low privileges. Impa...

CVE-2026-21253

CVE-2026-21253 is a Windows vulnerability in the Mailslot File System described as a use-after-free issue that can enable local privilege escalation. The CVE’s CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high attack complexity, and requires low privileges and no user interaction. The...

CVE-2026-26176

Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

CVE-2026-50390

CVE-2026-50390 is a Windows Kernel elevation-of-privilege in which an authorized attacker can gain local privileges through a type-confusion vulnerability (incompatible resource type). The CVE is documented with a CVSSv3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, BASE SCORE 7.0 (HIGH). Affe...

CVE-2026-50435

CVE-2026-50435 (Windows Overlay Filter): A buffer over-read in the Windows Overlay Filter enables a locally authenticated attacker to elevate privileges. The exploitation context is local with low attack complexity and no user interaction, and the impact is elevation of privileges with high confi...

CVE-2026-55004

CVE-2026-55004 corresponds to a local privilege-elevation flaw described as a double-free in Microsoft Printer Drivers. The CVSSv3.1 score is 7.8 (High) with local attack vector, low attack complexity, and privileges required, no user interaction, impacting confidentiality, integrity, and availab...

CVE-2026-69314

CVE-2026-69314 is a use-after-free vulnerability in the Windows Device Association Broker service that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 7.1 (HIGH) , with an attack vector of Network, High complexity, Low privileges ...

CVE-2026-69546

CVE-2026-69546 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack comple...

CVE-2026-69687

CVE-2026-69687 is an integer underflow (wrap or wraparound) vulnerability in the Windows USB Audio Class driver (usbaudio.sys). An authorized local attacker can exploit this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ; ve...

CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

CVE-2026-71343

CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...

CVE-2026-73013

CVE-2026-73013 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized, remote attacker to achieve code execution over a network. The Microsoft CNA assigns a CVSS 3.1 base score of 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a networ...

CVE-2025-53147

CVE-2025-53147 refers to a local privilege escalation in the Windows Ancillary Function Driver for WinSock caused by a use-after-free condition. The CVSS vector indicates a local, high-privilege impact with “LOW” privileges required and no user interaction, consistent with an attacker who already...

CVE-2025-59506

Technical details about CVE-2025-59506 are not provided in the supplied connected Microsoft KB/MSRC materials. The CVE entry here notes a race condition in Windows DirectX with local privilege escalation. Monitor for official patch/regression details from Microsoft.

CVE-2026-25171

Use-after-free in Windows at the level of Windows Authentication Methods allows an authorized attacker to elevate privileges locally. The vulnerability, CVE-2026-25171, is documented as a local privilege escalation in Windows Authentication Methods; exploitation requires the attacker to be locall...

CVE-2026-33099

Technical details (affected products, root cause, vulnerable components, or exploitation specifics) are not publicly provided in the supplied documents. Monitor for updates from sources like MSRC and the CVE record.

CVE-2026-33100

CVE-2026-33100: Use-after-free in Windows Ancillary Function Driver for WinSock allows a locally authorized privilege escalation. The connected advisory set confirms the driver as affected and lists CVE-2026-33100 with a base CVSS v3.1 score of 7.0 (High) and local attack vector. Mitigation is vi...

CVE-2026-34344

Technical details about CVE-2026-34344 are not publicly provided in the supplied connected documents. The available descriptions are generic; monitor for official disclosures, patches, and affected products in subsequent updates.

CVE-2026-34347

Technical details about CVE-2026-34347 are not publicly provided in the connected documents. The initial description notes a use-after-free in Windows Win32K GRFX enabling local privilege elevation, but no patch/version specifics are included in the supplied materials.

CVE-2026-40413

Technical details about CVE-2026-40413, including affected products, vulnerable components, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor official advisories for updates.

CVE-2026-41108

CVE-2026-41108 is a heap-based buffer overflow in the Microsoft Windows DNS Client that allows an authorized, local attacker to perform privilege escalation. Affected component: Windows DNS client functionality (DNS resolution path); root cause: heap-based overflow leading to elevation of privile...

CVE-2026-45605

CVE-2026-45605 is a Windows Bluetooth Service use-after-free vulnerability that allows an authorized, locally located attacker to escalate privileges. The CVSS 3.1 base score is 7.8 (High) with local attack vector, low attack complexity, and no user interaction; impact includes confidentiality, i...

CVE-2026-45636

The CVE-2026-45636 entries describe a heap-based buffer overflow in Windows NTFS that can allow an unauthenticated attacker to achieve local code execution. Affected software is Windows NTFS (filesystem driver). The underlying cause is a heap-based overflow; impact is high (CVE metrics show Local...

CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50505

CVE-2026-50505 is a Windows Message Queuing (MSMQ) remote code execution vulnerability described as a use-after-free in MSMQ that could allow an authorized attacker to execute code over a network. Public sources (MSRC update guidance) confirm updates addressing this issue and advise applying the ...

CVE-2026-57096

CVE-2026-57096 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that allows an authorized attacker to elevate privileges locally. The CVSSv3.1 base score is 7.8 (HIGH). Exploitation details are not provided beyond local privilege escalati...

CVE-2026-57976

The CVE-2026-57976 entry concerns Windows Active Directory Domain Services and is triggered by a null pointer dereference that can cause a denial of service over the network by an authorized attacker. The NVD entry corroborates a CVSS v3.1 base score of 6.5 (Medium), with NETWORK attack vector, L...

CVE-2026-68845

CVE-2026-68845 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to perform local privilege escalation . Microsoft rates it HIGH severity (CVSS 3.1: 7.8) with a local attack vector, low complexity, low privileges required, an...

CVE-2026-69827

CVE-2026-69827 affects Windows DNS Server and is caused by a race condition due to improper synchronization of a shared resource during concurrent execution. An unauthorized attacker can exploit this flaw to achieve remote code execution over the network. The Microsoft-assigned CVSS 3.1 score is ...

CVE-2025-50157

CVE-2025-50157 affects Windows Routing and Remote Access Service (RRAS) with an information disclosure due to use of an uninitialized resource. The base CVSS v3.1 score is 5.7 (Network, Low attack complexity, Privileges Required: Low, User Interaction: Required; Confidentiality Impact: High). Mic...