CVE-2025-55233

CVE-2025-55233 is a Windows Projected File System Elevation of Privilege vulnerability caused by an out-of-bounds read. The CVE affects Windows Projected File System and can be exploited by an authorized local attacker with low privileges and no user interaction to elevate privileges locally (CVS...

CVE-2025-64678

CVE-2025-64678 is a Windows RRAS heap-based buffer overflow vulnerability that allows a network-based attacker to achieve remote code execution. The NVD entry confirms the flaw, with a CVSS v3.1 base score of 8.8 (High), indicating a network attack vector, no privileges required, and user interac...

CVE-2026-26153

CVE-2026-26153 describes an out-of-bounds read in the Windows Encrypting File System (EFS) that could allow an authorized, locally authenticated attacker to obtain elevated privileges. The vulnerability is associated with EFS in Windows and is listed across multiple sources (NVD, CVE databases, M...

CVE-2026-32091

CVE-2026-32091 is a Microsoft elevation of privilege vulnerability in the Brokering File System with a CVSS 3.1 base score of 8.4 (HIGH). It is a local, no-user-interaction attack requiring no privileges, with high impact on confidentiality, integrity, and availability. The exploitation status is...

CVE-2026-42908

The CVE-2026-42908 entry describes an Out-of-bounds read in Windows Remote Desktop Protocol (RDP) that enables an unauthenticated attacker to disclose information over the network. Affected component is Windows RDP; the underlying fault is an out-of-bounds read, leading to information disclosure....

CVE-2026-42975

CVE-2026-42975 affects the Windows Bluetooth Port Driver and is caused by a heap-based buffer overflow. This can allow an unauthenticated attacker to execute code on a target system over an adjacent network. The documented impact is high (remote code execution with full device compromise) and the...

CVE-2026-48564

CVE-2026-48564 refers to a heap-based buffer overflow in Windows DHCP Server that enables a network-based remote code execution by an authorized attacker. According to the available records, the vulnerability is high severity (CVSS v3.1: 8.8), with network as the attack vector, low attack complex...

CVE-2026-50366

CVE-2026-50366 describes a Denial of Service in Windows Active Directory Domain Services caused by a null pointer dereference. The vulnerability is exploitable over the network with no user interaction, requiring low privileges and network access from an authenticated attacker; the impact is deni...

CVE-2026-62719

CVE-2026-62719 describes a heap-based buffer overflow in Windows Message Queuing that allows an authorized, locally-authenticated attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with Local attack vector, Low attack complexity, and privileges required. The impact is Conf and Inte...

CVE-2026-62752

CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...

CVE-2026-62755

CVE-2026-62755 affects the Windows DHCP Client. The vulnerability is a stack-based buffer overflow in the DHCP client component, leading to local privilege escalation for an authorized attacker. The CVSS 3.1 vector indicates Local attack, Low attack complexity, Low privileges required, with no us...

CVE-2026-62758

CVE-2026-62758 is a heap-based buffer overflow in Windows Remote Access Connection Manager that permits a locally authenticated attacker to elevate privileges. Affected component: RASMAN service on Windows. Root cause: heap overflow enabling arbitrary code execution with HIGH impact on confidenti...

CVE-2026-65662

CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...

CVE-2026-65796

CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution . A heap-based buffer overflow in the Windows iSCSI Target Service is the underlying vulnerability, enabling an unauthenticated attacker to execute code remotely over the network. Public sources consistently describe this as a rem...

CVE-2026-70346

CVE-2026-70346 is a Windows Installer vulnerability: a stack-based buffer overflow could allow an authorized, local attacker to elevate privileges. The description indicates local execution with high impact, but the documents do not provide exploit details or a remediation/patch. Exploitation sta...

CVE-2026-72982

This is a stack-based buffer overflow in Windows Netlogon that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexity network attack requiring...

CVE-2024-43538

CVE-2024-43538 affects the Windows Mobile Broadband Driver and is categorized as a Denial-of-Service vulnerability. The connected documents confirm the vulnerability and indicate that Microsoft has published updates related to Windows vulnerabilities, but they do not provide a specific patch deta...

CVE-2025-29967

Technical details about CVE-2025-29967 are not provided in the connected documents. Public details in the initial description exist, but no accompanying technical specifics (affected versions, root cause, exploit info, or remediation) are available here. Monitor for updates.

CVE-2025-32721

CVE-2025-32721 is a Windows Recovery Driver privilege-escalation flaw caused by improper link resolution before file access. Reported CVSS v3.1 base score 7.3 (High) with local, low-attack-skill requirements, user interaction required, and high impact on confidentiality, integrity, and availabili...

CVE-2025-49760

Technical details about CVE-2025-49760 are not publicly provided in the supplied documents. No affected products, CVSS specifics, or remediation are confirmed here. Monitor for updates from official advisories (e.g., MSRC) for concrete information.

CVE-2025-59280

CVE-2025-59280 affects the Windows SMB Client and is described as an improper authentication vulnerability that allows an unauthorized attacker to tamper over the network. The CVSSv3.1 vector from the initial document is: AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N with a base score of 3.1 (Low). Connect...

CVE-2026-42972

CVE-2026-42972 describes a Windows Hyper-V information disclosure vulnerability. The issue allows a locally authenticated attacker (low privileges) to disclose sensitive information due to exposure of information to an unauthorized actor. CVSS 3.1/Local, Low complexity, Privileges Low, Confidenti...

CVE-2026-45607

CVE-2026-45607 affects Windows Hyper-V with an out-of-bounds read vulnerability that allows an attacker to execute code locally. Documents indicate LOCAL attack vector, no user interaction required, and high impact on confidentiality, integrity, and availability. No specific remediation steps or ...

CVE-2026-50493

CVE-2026-50493 is a DirectX Graphics Kernel elevation-of-privilege vulnerability in Windows caused by a use-after-free in the Windows Graphics Kernel/DirectX component. It enables a locally authenticated attacker to elevate privileges. The CVSS v3.1 vector (L/L/L/L/U/H/H) indicates local, low att...

CVE-2026-50647

CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...

CVE-2020-1179

Summary of CVE-2020-1179 (Windows GDI Information Disclosure Vulnerability) : The vulnerability affects the Windows Graphics Device Interface (GDI) component, where memory contents may be improperly disclosed, enabling information exposure on vulnerable systems. Related entries (CVE-2020-0963, CV...

CVE-2025-29956

Technical details (affected components, vulnerable versions, exploitability, and remediation) are not provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for CVE-2025-29956.

CVE-2025-29958

Technical details about CVE-2025-29958 (uninitialized resource in RRAS) are not public in the provided documents. Monitor for vendor advisories and future updates.

CVE-2026-20806

CVE-2026-20806 is a Windows COM vulnerability described as a type confusion in resource access that can let an authorized, locally authenticated attacker disclose data. The CVE is referenced across multiple sources (NVD, Red Hat, NCSC, CIRCL) with the same description of a local information discl...

CVE-2026-21248

CVE-2026-21248 describes a heap-based buffer overflow in Windows Hyper-V. The vulnerability allows an authorized, locally-privileged attacker to execute code on the affected host. The CVSS v3.1 metrics indicate LOCAL attack vector, LOW attack complexity and LOW privileges required, with UI access...

CVE-2026-32071

CVE-2026-32071 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. The affected component is LSASS; the CVSS metrics indicate network-based exploitation with low complexity, no privileges or user interaction required, and an impact on availability (HIG...

CVE-2026-40407

CVE-2026-40407 describes a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that permits an authorized, local attacker to elevate privileges. The vulnerability impact is local privilege escalation with a CVSS v3.1 base score of 7.8 (HIGH) and impact to confidentialit...

CVE-2026-50474

CVE-2026-50474 is a Remote Desktop Client vulnerability described as a use-after-free that allows an unauthenticated attacker to execute code over a network. The affected component is the Remote Desktop Client; the root cause is use-after-free in the client handling of remote sessions. The CVE is...

CVE-2026-50690

CVE-2026-50690 is a Windows SMB information-disclosure vulnerability described as caused by the use of an uninitialized resource within Windows SMB that can allow an authorized local attacker to disclose information. The CVE is linked to Microsoft advisories and MSRC updates addressing the issue,...

CVE-2026-61937

CVE-2026-61937 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer overflow/wraparound. An authenticated, local attacker could exploit this to gain elevated privileges on affected systems. The available documents identify the vulnerable component as Windows HTTP.sys an...

CVE-2026-62748

CVE-2026-62748 affects the Windows Telephony Service. The issue is a race condition due to improper synchronization on a shared resource, enabling a locally authorized attacker to elevate privileges. The weakness is exploited locally with no user interaction and results in high impact to confiden...

CVE-2024-43558

CVE-2024-43558 is a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Underlying impact: Denial of Service (availability impact stated). CVSSv3.1 base score 6.5 (Adjac ent attack vector, Low attack complexity, No privileges, No u...

CVE-2025-49721

CVE-2025-49721 describes a heap-based buffer overflow in the Windows Fast FAT Driver that enables local privilege escalation for an unauthenticated attacker requiring user interaction. The CVSS 3.1 vector (LOCAL/LOW/NONE UI:R S:U) yields a base score of 7.8 (HIGH) with impact on confidentiality, ...

CVE-2026-20849

CVE-2026-20849 is a Windows Kerberos elevation of privilege vulnerability caused by reliance on untrusted inputs in a security decision. The description indicates an authorized attacker could elevate privileges over a network. The provided documents give a CVSS v3.1 base score of 7.5 (Network, Hi...

CVE-2026-26155

CVE-2026-26155 is a Microsoft Local Security Authority Subsystem Service information disclosure vulnerability. The entry lists a CVSS v3.1 base score 6.5 (MEDIUM) with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a Network attack vector, low complexity , and low privileges requ...

CVE-2026-40410

Technical details (affected component, root cause, affected versions, exploit vectors or fixes) are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2026-44812

CVE-2026-44812 affects Windows graphics component Win32K GRFX, where an integer overflow/wraparound in GRFX can allow an unauthorized attacker to execute code locally. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Exploitation details are not provide...

CVE-2026-50330

CVE-2026-50330 is a Windows Remote Desktop Client vulnerability described as a heap-based buffer overflow that allows an unauthenticated attacker to escalate privileges over the network. The CVE appears in multiple sources (NVD, EUVD, CIRCL) with consistent language about privilege elevation via ...

CVE-2026-50444

CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62883

CVE-2026-62883 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. Affected component: Windows DNS resolution logic. Root cause: numeric truncation leads to improper handling of DNS-related data, enabling local privilege escalation...

CVE-2025-29960

CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) can lead to information disclosure over the network. The description specifies network-based access with high confidentiality impact; no explicit product version or fix details are provided in the connected doc...

CVE-2025-48824

Technical details (affected product, version, root cause, exploit, or remediation) are not provided in the connected documents; no concrete specifics about CVE-2025-48824 are available here. Monitor for official disclosures and updates.

CVE-2026-20873

CVE-2026-20873 describes a race-condition in Windows Management Services that enables local privilege escalation by an authorized attacker. The issue affects Windows Management Services components and is documented in Microsoft security updates as part of January 2026 patching. Microsoft KBs KB50...

CVE-2026-45655

CVE-2026-45655 affects Windows BitLocker. The description indicates a protection mechanism failure that could allow an unauthorized attacker to bypass a security feature via a physical attack. The connected documents provide the following details: CVSSv3.1 base score 5.3 (Medium), attack vector P...