CVE-2026-55001

CVE-2026-55001 affects Windows Active Directory / Active Directory Domain Services. The root cause is improper certificate validation within AD, enabling an authorized attacker to achieve local privilege escalation. CVSS 3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low; User In...

CVE-2026-56647

CVE-2026-56647 is a Windows vulnerability in the Windows Remote Access Service Infrastructure where an integer overflow/wraparound can let an authorized attacker elevate privileges over a network. The affected component is the Windows Remote Access Service Infrastructure, and the root cause is an...

CVE-2026-62769

CVE-2026-62769 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. The vulnerability arises from a faulty numeric handling (truncation) within the Windows DNS component, enabling local privilege escalation with high impact on confi...

CVE-2025-47987

Technical details of CVE-2025-47987 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2025-49664

Technical details about CVE-2025-49664 (affected components, root cause, impact, or remediation) are not provided in the connected documents. Monitor official advisories and vendor patch notes for authoritative information and fixes.

CVE-2025-49722

Technical details about CVE-2025-49722 are not present in the provided documents. No affected products, root cause, exploit vector, or fixes are disclosed here. Monitor for updates and consult the primary CVE entry for authoritative information.

CVE-2025-53720

Technical details about CVE-2025-53720 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; current entries reference RRAS vulnerability but lack affected versions, exploit information, or mitigations in these sources.

CVE-2025-53789

CVE-2025-53789 affects Windows StateRepository API where missing authentication enables local privilege escalation. The NCSC advisory references this CVE with CVSS 3.1/7.8 (High) and impact described as escalating privileges. No explicit affected product/version details or fix/remediation are pro...

CVE-2026-20864

CVE-2026-20864 describes a heap-based buffer overflow in the Connected Devices Platform Service (Cdpsvc) on Windows that enables an authorized local attacker to elevate privileges. The vulnerability affects Cdpsvc and is rated high (CVSS v3.1 base 7.8; Local, Low Attack Complexity, Privileges Req...

CVE-2026-20921

CVE-2026-20921 is a Windows SMB Server vulnerability described as a race condition in a shared resource that could allow an authenticated attacker to elevate privileges over the network. Connected sources indicate this CVE is listed under Windows SMB Server with an exploitability/impact profile (...

CVE-2026-20923

CVE-2026-20923 is a use-after-free in Windows Management Services that allows an authorized, locally situated attacker to elevate privileges. Evidence from Nessus/NVD/CVE records shows this CVE is associated with Windows Management Services and is listed among January 2026 security updates. Remed...

CVE-2026-20927

CVE-2026-20927 affects Windows SMB Server and is described as a race-condition in a shared resource that can allow an authorized attacker to cause a denial of service over the network. The connected Nessus NASL entries list this CVE under Windows SMB Server with a 5.3 base score (Denial-of-Servic...

CVE-2026-25173

CVE-2026-25173 concerns Windows RRAS where a module/component used by RRAS may be exploited to achieve remote code execution. The CVE is categorized with CVSS v3.1: base score 8.0 (HIGH), attack Vector: Network, attack Complexity: Low, privileges Required: Low, user Interaction: Required, and imp...

CVE-2026-32077

CVE-2026-32077 is a Windows UPnP Device Host elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH) with a LOCAL attack vector, LOW attack complexity, and required LOW privileges; no user interaction is needed. Affects confidentiality, integrity, and availability (all HIGH i...

CVE-2026-32093

CVE-2026-32093 affects Windows Function Discovery Service (fdwsd.dll). The vulnerability is a race condition due to improper synchronization in shared resource access, enabling an authorized attacker to elevate privileges locally. Public sources (MSRC/MSKB advisories and NCSC) confirm the issue a...

CVE-2026-32162

CVE-2026-32162 is a Windows COM elevation of privilege vulnerability with local access, no user interaction, and high impact to confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.4 (HIGH) with exploit code maturity labeled UNPROVEN and remediation level OFFICIAL_FIX. Affec...

CVE-2026-32209

Technical details (affected components, exploit vectors, root cause, vulnerable versions, and fixes) are not publicly provided in the supplied documents. Monitor official updates from NVD/CVE for further information.

CVE-2026-34338

CVE-2026-34338 : Use-after-free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. The publicly provided documents confirm the vulnerability and impact but do not reveal affected Windows versions, exact internal component, or remediation details. The NVD ent...

CVE-2026-40409

Technical details for CVE-2026-40409 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD for affected products, root cause, impact, and remediation.

CVE-2026-42984

CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...

CVE-2026-42986

CVE-2026-42986 describes a use-after-free in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally. Affected: Microsoft Graphics Component; vulnerability class: use-after-free leading to local privilege escalation. Root cause as stated: after-free condi...

CVE-2026-48563

CVE-2026-48563 describes a heap-based buffer overflow in the Remote Desktop Client that enables an unauthenticated attacker to execute code over the network. The accompanying metrics indicate a high-severity impact (CVSS 3.1 base score 7.5) with attacker control over network access, requiring use...

CVE-2026-48575

CVE-2026-48575 describes a protection mechanism failure in Windows Secure Boot that allows an authorized, local attacker to bypass a security feature. The vulnerability enables a local escalation path with high impact on confidentiality and integrity (base score 7.9; AV:L/AC:L/PR:H/UI:N/S:C/C:H/I...

CVE-2026-49801

The CVE-2026-49801 entry concerns Windows SMB: an uninitialized resource within SMB handling can lead to local information disclosure by an authorized user. The attack is described as local with low privileges required and no user interaction, and the impact targets confidentiality (information d...

CVE-2026-50359

CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...

CVE-2026-50412

CVE-2026-50412 is a Windows NTFS elevation-of-privilege vulnerability caused by a stack-based buffer overflow. The affected component is NTFS in Windows, allowing an authorized local attacker with low privileges and no user interaction to gain SYSTEM-level privileges (base CVSS v3.1: 7.8, Local, ...

CVE-2026-50463

CVE-2026-50463 is a Windows Kernel information-disclosure flaw (out-of-bounds read) that can be exploited remotely over a network to disclose data. The CVE is documented across NVD/EUVD and related feeds, and Microsoft has released updates (KB5099539/KB5099540 and MSRC page) addressing this vulne...

CVE-2026-50482

CVE-2026-50482 : Heap-based buffer overflow in Windows NTFS can allow a locally authenticated attacker to execute code. Exploitation requires local access with low privileges and user interaction, per the CVE metrics (AV:L, PR:L, UI:R). Public references indicate Microsoft has released updates to...

CVE-2026-50484

CVE-2026-50484 is a Windows Kernel heap-based buffer overflow that enables local privilege escalation for an authenticated attacker. Public docs confirm the vulnerability and affected component as the Windows Kernel, with the impact described as local privilege elevation. Microsoft and MSRC have ...

CVE-2026-50485

CVE-2026-50485 is a Windows Hyper-V Denial of Service vulnerability caused by a buffer over-read. It can be exploited by an attacker who has adjacent network access to deny service on the target host, with high privileges required and no user interaction. The documented impact is availability los...

CVE-2026-56175

CVE-2026-56175 describes a heap-based buffer overflow in Windows NTFS that allows an authorized, local attacker to elevate privileges. Connected sources (Microsoft MSRC update, NVD, NTFS/CIRCL sightings) confirm the vulnerability is in Windows NTFS, with local-privilege-escalation potential and a...

CVE-2026-62703

CVE-2026-62703: Out-of-bounds read in Windows DWM Core Library. An authenticated, local attacker can disclose information. Affected component: Windows DWM Core Library. Impact aligns with CVSS: Confidentiality High; Privileges Required Low; User Interaction None; Attack Vector Local. The provided...

CVE-2026-62715

The CVE-2026-62715 entry describes an integer underflow (wrap or wraparound) in Windows DHCP Server that allows an unauthorized attacker on an adjacent network to disclose information. Affected component: Windows DHCP Server. Cause: underflow in a function handling DHCP data; impact: information ...

CVE-2026-62738

The vulnerability CVE-2026-62738 affects Windows Management Instrumentation and enables an authorized, local attacker to disclose information through an out-of-bounds read. The available descriptions consistently state information disclosure as the impact; no details on specific vulnerable binari...

CVE-2026-62812

CVE-2026-62812 concerns Windows DHCP Server and describes an elevation of privilege via improper link resolution before file access ('link following'). An attacker with local, low-privilege access and no user interaction could elevate privileges to achieve high impact (CVSS v3.1: AV:L/AC:L/PR:L/U...

CVE-2026-73025

CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...

CVE-2025-48815

CVE-2025-48815 affects Windows OS via a type confusion in the SSDP Service that could allow an authorized local attacker to elevate privileges. The description states local privilege escalation with high impact (CVSSv3.1: 7.8, HIGH). No explicit exploitation details or vendor/product versions are...

CVE-2025-49730

Technical details about CVE-2025-49730 are not publicly available in the provided connected documents. Monitor for updates from official advisories; no information on affected products, root cause, or fixes is provided here.

CVE-2025-53136

CVE-2025-53136 is listed under Windows NT OS Kernel with a Medium CVSS v3.1 (5.5) and impact described as Access to sensitive data . The connected documents provide the affected product (Windows NT OS Kernel) and impact, but do not disclose root cause details or a specific fix. Public references ...

CVE-2025-53808

CVE-2025-53808 is a local privilege-escalation in Windows Defender Firewall Service caused by a type confusion in resource access. Affected: Windows Defender Firewall Service (Windows). Impact and exploitability as per provided metrics: local, high privileges required, none user interaction, conf...

CVE-2025-54913

CVE-2025-54913 affects Windows UI XAML Maps MapControlSettings. It is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to locally elevate privileges. Reported CVSS base score ~7.8 (HIGH) with LOCAL attack vector...

CVE-2025-58718

CVE-2025-58718 is a use-after-free in the Windows Remote Desktop Client that allows a network-based, unauthenticated attacker to execute code on the affected system. CVSSv3.1 shows AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH); exploitation requires user interaction. Connect...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...

CVE-2025-64673

CVE-2025-64673 is a Windows Storage VSP Driver elevation-of-privilege vulnerability in the Storvsp.sys component. The connected sources confirm improper access control in Storvsp.sys that could allow an authorized, local attacker with low privileges to obtain higher privileges. The CVSS v3.1 base...

CVE-2026-20816

CVE-2026-20816 is a Windows Installer time-of-check/time-of-use (TOCTOU) race condition that can allow a local user with low privileges to escalate to higher privileges. The connected Nessus entries flag this as affecting Windows Installer and describe the vulnerability as a local privilege escal...

CVE-2026-26154

Technical details about CVE-2026-26154 are not publicly provided in the supplied documents. Monitor official advisories for updates on affected products, impact, and remediation.

CVE-2026-27908

CVE-2026-27908 is a Windows Elevation of Privilege vulnerability in the TDI Translation Driver (tdx.sys). The CVSS 3.1 base score is 7.0 (HIGH) with LOCAL attack vector, HIGH impact to confidentiality, integrity, and availability. Exploitation is deemed UNPROVEN and requires LOW privileges with N...

CVE-2026-27928

CVE-2026-27928 is a Windows Hello security feature bypass vulnerability. The initial sources describe improper input validation in Windows Hello that allows an unauthenticated attacker to bypass a security feature over a network (attack vector: network; user interaction: none). The CVSS 3.1 base ...

CVE-2026-32086

CVE-2026-32086 is an Elevation of Privilege vulnerability in Windows’ Function Discovery Service (fdwsd.dll). The entry notes local attack potential with a HIGH impact on confidentiality, integrity, and availability, requiring LOW privileges and no user interaction. The CVSS details indicate a HI...

CVE-2026-35418

CVE-2026-35418 – Summary : Use-after-free in Windows Cloud Files Mini Filter Driver allows an authorized local attacker to elevate privileges. The CVE entry is supported by NVD/EUVD/CVE records describing a local, privilege-escalation vulnerability with a high CVSS v3.1 score (7.8; LOCAL, LOW att...