CVE-2026-69590

CVE-2026-69590 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) . An unauthenticated, network-based attacker can exploit it with no user interaction to gain unauthorized access to the victim's machine. The CVSS 3.1 score is 9.8 (Critical) , with high im...

CVE-2020-1189

Technical details about CVE-2020-1189 are not publicly provided in the connected documents; no affected product/version or remediation is stated. Monitor for updates.

CVE-2020-1190

Technical details, affected products, and remediation are not provided in the supplied documents. Monitor EUVD entries for updates on CVE-2020-1190.

CVE-2020-1364

CVE-2020-1364 affects Windows WalletService. Description: a denial-of-service vulnerability arising from how WalletService handles files, allowing an attacker to craft an application that corrupts system files to trigger DoS. Connected CNVD entry confirms WalletService DoS with file handling as r...

CVE-2024-43526

Technical details (affected product/version, root cause, impact, or fix) for CVE-2024-43526 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2025-21248

CVE-2025-21248 is a Windows Telephony Service Remote Code Execution vulnerability. The initial and connected documents confirm affected software: Windows Telephony Service component, with exploitable path over the network and required user interaction. CVSS v3.1 base score 8.8 (HIGH), with full i...

CVE-2026-32161

CVE-2026-32161 describes a race condition in the Windows Native WiFi Miniport Driver caused by improper synchronization, enabling an adjacent-network attacker to potentially execute code on the vulnerable system. The description across sources notes a remote-code-execution impact with a CVSS v3.1...

CVE-2026-40397

CVE-2026-40397 describes an integer underflow (wrap/wraparound) in the Windows Common Log File System Driver that enables a locally authenticated attacker to elevate privileges. The description indicates a local, privileges-required (low), no user interaction vulnerability with high impact to con...

CVE-2026-42969

Technical details about CVE-2026-42969 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-45658

CVE-2026-45658 affects Windows BitLocker. Description: protection mechanism failure allows bypass via physical access. Documented impact: confidentiality, integrity, and availability at HIGH; attack vector LOCAL, complexity LOW, privileges required LOW, no user interaction. CVSS v3.1 base score 7...

CVE-2026-50324

CVE-2026-50324 affects Windows Active Directory Federation Services (AD FS). The description identifies a loop condition described as an infinite loop that enables a network-based Denial of Service against AD FS. The CVE entry lists a Medium severity (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) with Ava...

CVE-2026-61345

CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...

CVE-2026-61925

CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...

CVE-2026-62782

CVE-2026-62782 is a Windows SMB Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The description and multiple sources (NVD, MSRC, CIRCL, ENISA/NCSC advisory references) confirm the affected compo...

CVE-2021-26886

CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...

CVE-2024-43534

CVE-2024-43534 is a Windows Graphics Component Information Disclosure vulnerability. The affected product is Windows Graphics Component; the entry indicates an information disclosure impact (confidentiality) with network attack vector, no integrity/availability impact, and user interaction requir...

CVE-2024-43536

CVE-2024-43536 affects the Windows Mobile Broadband driver and enables remote code execution through the driver component (execute random code). The CVSS vector from the initial data shows physical attack vector, no user interaction, and no privileges required, with high impact to confidentiality...

CVE-2024-43555

CVE-2024-43555 is listed in the connected documents as affecting the Windows Mobile Broadband Driver with a Denial-of-Service impact (CVSS approx. 6.5). The materials do not provide a detailed root cause, affected subcomponent, exploit vectors, or explicit patch/version information for this CVE. ...

CVE-2025-29836

Technical details for CVE-2025-29836 (e.g., affected product, root cause, impact, or remediation) are not provided in the supplied connected documents. Please monitor for updates from official advisories.

CVE-2025-29839

Technical details about CVE-2025-29839 (affected product/version/root cause/impact/fix) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2025-33063

CVE-2025-33063 affects the Windows Storage Management Provider and describes an out-of-bounds read that can let an authorized local attacker disclose information. The vulnerability has a high confidentiality impact (data exposure) with local attack vector; there is no exploitation detail in the I...

CVE-2026-20840

CVE-2026-20840 is a Windows NTFS heap-based buffer overflow that enables local code execution by an authorized attacker. The vulnerability affects the Windows NTFS component and is rated with a CVSS v3.1 base score of 7.8 (High) for local, low-attack‑complexity, no user interaction, with high con...

CVE-2026-21265

CVE-2026-21265 describes a Secure Boot bypass tied to expiration of Microsoft root certificates in the UEFI KEK/DB chain. Affected certificates include KEK CA 2011 (expires 2026-06-24), UEFI CA 2011 (expires 2026-06-27), and Windows Production PCA 2011 (expires 2026-10-19). The vulnerability aris...

CVE-2026-45635

CVE-2026-45635 affects Windows UPnP Device Host through a use-after-free in upnp.dll, enabling remote code execution over the network. The issue is tied to the Universal Plug and Play component, with impact described as remote, unauthenticated code execution; CVSSv3.1 base score 8.1 (HIGH). Affec...

CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

CVE-2020-0743

CVE-2020-0743 is an elevation of privilege in Microsoft Windows/Windows Server arising from how the Connected Devices Platform Service handles objects in memory. The root cause is a memory handling flaw in that service, enabling an attacker to execute code with elevated privileges. No specific ex...

CVE-2020-1138

CVE-2020-1138 is a Windows Storage Service Elevation of Privilege vulnerability caused by improper handling of file operations. An attacker who gains code execution on a vulnerable system could elevate privileges by exploiting Storage Service behavior. The MSRC entry states exploitation requires ...

CVE-2020-1142

CVE-2020-1142 is a Windows GDI Elevation of Privilege vulnerability in which the Graphics Device Interface mishandles objects in memory, enabling local attackers to run code in kernel mode after logging on. The NVD/MS advisories describe a high-impact, local, privilege-escalation flaw with 7.2/7....

CVE-2020-1164

Technical details for CVE-2020-1164 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and remediation.

CVE-2024-43540

CVE-2024-43540 corresponds to a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Root cause/impact: DoS vulnerability; base CVSS not exceeding MEDIUM in the provided metrics, with impact limited to availability. Mitigation: Micr...

CVE-2024-43542

CVE-2024-43542 affects the Windows Mobile Broadband Driver. The vulnerability is described as a Denial-of-Service issue (impact: Availability) with an adjacent attacker and low attack complexity; no root-cause details are provided in the supplied documents. Mitigation/fix: Microsoft has released ...

CVE-2025-21257

CVE-2025-21257 corresponds to Windows WLAN AutoConfig Service Information Disclosure Vulnerability. The connected documents identify the affected component as the Windows WLAN AutoConfig Service and describe the issue as an information disclosure vulnerability, with local attack requirements (Loc...

CVE-2025-59199

CVE-2025-59199 affects the Software Protection Platform (SPP). It is described as an improper access control vulnerability that allows a locally authenticated attacker to escalate privileges (CVSSv3.1 base score 7.8, HIGH; attack vector: LOCAL; privileges required: LOW; user interaction: NONE). T...

CVE-2026-26174

CVE-2026-26174 is a race-condition vulnerability in Windows Server Update Services (WSUS) that enables a locally authenticated attacker to achieve elevation of privileges. The issue is described as concurrent execution using a shared resource with improper synchronization. Multiple connected docu...

CVE-2026-27915

CVE-2026-27915 affects Windows UPnP Device Host. It enables local privilege escalation with a low attack complexity and no user interaction, requiring limited privileges and resulting in high confidentiality, integrity, and availability impact. The CVSSv3.1 base score is 7.8 ( HIGH ), with exploi...

CVE-2026-35420

CVE-2026-35420 is described in the provided sources as a heap-based buffer overflow in the Windows kernel that enables a locally authenticated attacker to achieve privilege escalation. The CVE entry itself cites an elevation of privileges without detailing exploit vectors beyond local access, and...

CVE-2026-42837

CVE-2026-42837 describes a buffer over-read in the Windows Projected File System Filter Driver that allows an authenticated local attacker to elevate privileges. The affected component is the Windows Projected File System Filter Driver; root cause is a buffer over-read within the filter driver. T...

CVE-2026-42903

Windows Kerberos in Windows is affected by CVE-2026-42903, a null pointer dereference that can be exploited by an authorized attacker over the network to cause a denial of service. The CVSS data indicates network access with low attack complexity, low privileges required, no user interaction, and...

CVE-2026-50365

CVE-2026-50365 describes an Elevation of Privileges in the Windows RPC API (RPC server) due to improper authentication, enabling an adjacent-network attacker to gain high-priority access. Public data confirms an adjacent-network attack vector with high severity (CVSS ~8.0). The affected component...

CVE-2026-59137

Technical details about CVE-2026-59137 are not publicly provided in the supplied documents. No affected products, versions, or remediation are specified here. Monitor for updates from official sources.

CVE-2026-61939

CVE-2026-61939 is a Winlogon-use-after-free vulnerability that allows an authorized, low-privilege attacker to elevate privileges locally. Public description confirms local access as attack vector (LOCAL) with high impact on confidentiality, integrity, and availability. The CVSS 3.1 vector is AV:...

CVE-2026-62696

CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...

CVE-2026-62746

CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...

CVE-2026-62803

The vulnerability CVE-2026-62803 affects Windows DHCP Server and stems from improper link resolution ("link following") before file access in the DHCP service. An authorized, local attacker could leverage this to elevate privileges on the host. The confirmed impact is local, with high confidentia...

CVE-2026-62881

The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...

CVE-2019-1416

CVE-2019-1416 is a Windows Subsystem for Linux elevation-of-privilege vulnerability caused by a race condition. It allows a locally authenticated attacker to run code with elevated permissions by exploiting WSL memory handling. Microsoft released updates (e.g., KB4523205) to address this issue; e...

CVE-2020-0854

Microsoft Windows Mobile Device Management Diagnostics Elevation of Privilege (CVE-2020-0854) is caused by improper handling of junctions in MDM Diagnostics. An attacker who can log on and run a crafted application could bypass access restrictions and delete files. The vulnerability is addressed ...

CVE-2021-26861

CVE-2021-26861 is a Windows Graphics Component remote code execution vulnerability. Public records identify the affected component as the Windows Graphics Component; the underlying issue is reflected in the CVSS3 metrics (base score 7.8 HIGH, LOCAL exploit, user interaction required, and high imp...

CVE-2025-33060

CVE-2025-33060 affects the Windows Storage Management Provider and is described as an out-of-bounds read that can allow an authorized, locally authenticated attacker to disclose information. The NCSC advisory confirms it under Windows Storage Management Provider with CVSS 5.5 (LOCAL, Privileges L...

CVE-2025-48000

CVE-2025-48000 is described as a use-after-free vulnerability in the Windows Connected Devices Platform Service that allows an authorized local attacker to achieve privilege escalation. The provided documents specify the vulnerable component and the impact (local privilege escalation) but do not ...