4929 matches found
CVE-2025-64673
CVE-2025-64673 is a Windows Storage VSP Driver elevation-of-privilege vulnerability in the Storvsp.sys component. The connected sources confirm improper access control in Storvsp.sys that could allow an authorized, local attacker with low privileges to obtain higher privileges. The CVSS v3.1 base...
CVE-2026-20864
CVE-2026-20864 describes a heap-based buffer overflow in the Connected Devices Platform Service (Cdpsvc) on Windows that enables an authorized local attacker to elevate privileges. The vulnerability affects Cdpsvc and is rated high (CVSS v3.1 base 7.8; Local, Low Attack Complexity, Privileges Req...
CVE-2026-20927
CVE-2026-20927 affects Windows SMB Server and is described as a race-condition in a shared resource that can allow an authorized attacker to cause a denial of service over the network. The connected Nessus NASL entries list this CVE under Windows SMB Server with a 5.3 base score (Denial-of-Servic...
CVE-2026-21231
CVE-2026-21231 describes a race condition in the Windows Kernel involving concurrent execution on a shared resource with improper synchronization, enabling local privilege escalation for an authorized attacker. The vulnerability impact is: local attack vector, requiring low privileges, no user in...
CVE-2026-21238
CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...
CVE-2026-25189
The CVE-2026-25189 entry concerns a Use-after-Free in Windows DWM Core Library that allows an authorized attacker to locally elevate privileges. Affected component is Windows DWM Core Library; root cause is a use-after-free condition leading to privilege escalation. Microsoft and related advisori...
CVE-2026-26170
CVE-2026-26170 is a PowerShell elevation of privilege vulnerability described as requiring local access with low privileges and no user interaction. CVSS 3.1 base score 7.8 (HIGH) with high impact on confidentiality, integrity, and availability; exploit code maturity is UNPROVEN. The entry notes ...
CVE-2026-42905
The CVE-2026-42905 entry describes a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to escalate privileges locally. Affected component: Windows DWM Core Library. Root cause: use-after-free condition leading to local privilege escalation. Impact: el...
CVE-2026-42911
CVE-2026-42911 describes a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. The issue permits an authorized local attacker to elevate privileges. The documented impact is local privilege elevation with high severity (CVSSv3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H,...
CVE-2026-45605
CVE-2026-45605 is a Windows Bluetooth Service use-after-free vulnerability that allows an authorized, locally located attacker to escalate privileges. The CVSS 3.1 base score is 7.8 (High) with local attack vector, low attack complexity, and no user interaction; impact includes confidentiality, i...
CVE-2026-48573
CVE-2026-48573 describes a protection mechanism failure in Windows Secure Boot allowing an authorized attacker to bypass a security feature locally. The NVD entry notes a local attack vector with high impact on confidentiality and integrity (C:H/I:H) and a CVSS v3.1 base score of 7.9. Connected d...
CVE-2026-56186
CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...
CVE-2026-65786
CVE-2026-65786 is a heap-based buffer overflow in Desktop Window Manager that allows an authorized local attacker to elevate privileges. Affected: Desktop Window Manager on Windows. Root cause: heap-based overflow in DWM. Impact: local privilege escalation with high confidentiality/integrity/avai...
CVE-2025-47986
CVE-2025-47986 : Affected software is the Windows Universal Print Management Service. The vulnerability is a use-after-free in that service, enabling an authorized attacker to achieve local privilege escalation. The CVE has a high impact (8.8/10) with local, privilege-related execution and a chan...
CVE-2025-49661
Technical details about CVE-2025-49661 (affected product/version, root cause, exploitability, or fix) are not provided in the connected documents; the supplied sources cover Windows KB/security updates but do not describe the CVE specifics.
CVE-2025-49675
Technical details (affected product, exploit specifics, root cause) are not provided in the connected documents. Monitor for official CVE disclosures and vendor advisories for concrete remediation and impact.
CVE-2025-49685
CVE-2025-49685 is a local privilege-elevation vulnerability in the Microsoft Windows Search Component, caused by a use-after-free condition. The CVE is categorized with CVSS v3.1 base score 7.0 (HIGH), attack vector LOCAL, privilege required LOW, no user interaction, and affects Windows Search Co...
CVE-2025-53132
Technical details for CVE-2025-53132 (Windows Win32K GRFX race condition privilege escalation) are not provided in the connected documents. Public specifics (affected versions, exploit details, or fixes) are not available here; monitor for updates from official advisories.
CVE-2025-54093
CVE-2025-54093 is described as a time-of-check time-of-use (TOCTOU) race in the Windows TCP/IP stack that can enable a locally authenticated attacker to elevate privileges. Connected sources reference this CVE in the context of Windows TCP/IP and note it as a local-privilege-escalation issue, wit...
CVE-2025-54911
CVE-2025-54911 refers to a use-after-free vulnerability in Windows BitLocker that could allow an authorized, locally present attacker to elevate privileges. The CVE entry notes a high-impact scenario with local attack vector, requiring low privileges and user interaction, per the provided CVSS 3....
CVE-2026-20844
CVE-2026-20844 is a Windows Clipboard Server use-after-free vulnerability that enables local privilege escalation. The linked Nessus/NVD/CVE data confirm the affected component is Windows Clipboard Server and that successful exploitation yields elevation of privileges. The issue is being addresse...
CVE-2026-34333
CVE-2026-34333 describes a use-after-free in Windows Win32K GRFX that enables a locally authenticated user to elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction, affecting confidentiality, int...
CVE-2026-48570
CVE-2026-48570 concerns a protection mechanism failure in Windows Secure Boot that could allow an authorized attacker with HIGH privileges to bypass a security feature locally (local attack, no user interaction). The CVSS 3.1 vector is AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N with a base score of 7.9 ...
CVE-2026-48575
CVE-2026-48575 describes a protection mechanism failure in Windows Secure Boot that allows an authorized, local attacker to bypass a security feature. The vulnerability enables a local escalation path with high impact on confidentiality and integrity (base score 7.9; AV:L/AC:L/PR:H/UI:N/S:C/C:H/I...
CVE-2026-50391
CVE-2026-50391 is a Microsoft Windows Group Policy privilege-escalation vulnerability. Affects Windows Group Policy functionality; root cause is improper privilege management that permits an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.8 (High) with local, low attack co...
CVE-2026-50463
CVE-2026-50463 is a Windows Kernel information-disclosure flaw (out-of-bounds read) that can be exploited remotely over a network to disclose data. The CVE is documented across NVD/EUVD and related feeds, and Microsoft has released updates (KB5099539/KB5099540 and MSRC page) addressing this vulne...
CVE-2026-50482
CVE-2026-50482 : Heap-based buffer overflow in Windows NTFS can allow a locally authenticated attacker to execute code. Exploitation requires local access with low privileges and user interaction, per the CVE metrics (AV:L, PR:L, UI:R). Public references indicate Microsoft has released updates to...
CVE-2026-50666
CVE-2026-50666 is a Windows Privilege Escalation vulnerability described as a use-after-free in the Windows Remote Access Connection Manager. The issue allows an authorized attacker to elevate privileges over a network. Public sources (NVD/NCSC/NVD-related) corroborate the impact and indicate Mic...
CVE-2026-50680
CVE-2026-50680 is a heap-based buffer overflow in Windows Hyper-V that enables local privilege escalation by an authorized attacker. The issue affects Hyper-V and is exploitable locally with high privileges required and no user interaction, per the CVE description and details in connected documen...
CVE-2026-54115
CVE-2026-54115 is a Windows Message Queuing (MSMQ) elevation of privilege vulnerability with an integer overflow/wraparound issue described as affecting Windows Active Directory. The CVE entry indicates an authorized, local attacker can elevate privileges. Public references show multiple advisori...
CVE-2026-61923
CVE-2026-61923 describes a heap-based buffer overflow in Windows Display Enhancement Service that could allow an authorized local attacker to elevate privileges. Documented impact is high for confidentiality, integrity, and availability; exploitation details, affected Windows versions, specific v...
CVE-2026-62747
CVE-2026-62747 is a heap-based buffer overflow in Windows Device Association Service that enables a locally authenticated attacker to elevate privileges. Exploit details are not provided in the connected documents, and no specific patch/version is listed here; CVSS v3.1 base score is 7.8 ( HIGH )...
CVE-2026-62752
CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...
CVE-2026-62768
CVE-2026-62768 describes a stack-based buffer overflow in Windows Installer that can allow an authorized, locally authenticated user to elevate privileges. Affected component is Windows Installer; root cause is a buffer overflow in processing certain installer data, leading to high impact on conf...
CVE-2025-47975
Technical details about CVE-2025-47975 are not publicly provided in the connected documents. The available sources do not describe affected products/versions, root cause specifics, impact beyond the general privilege escalation claim, or fixes. Monitor for updates.
CVE-2025-47985
Technical details (affected component/version, root cause, exploitation) are not provided in the supplied documents. Monitor official advisories for updates and confirmed fixes.
CVE-2025-48806
Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.
CVE-2025-49668
Technical details for CVE-2025-49668 are not publicly provided in the supplied connected documents. No product/version/root-cause/mitigation is specified here. Monitor for updates from Microsoft and the CVE entry for further specifics.
CVE-2025-49680
CVE-2025-49680 affects the Windows Performance Recorder component. Root cause: improper link resolution before file access ("link following"). Impact: local Denial-of-Service by an authenticated user. Public details in connected documents confirm the vulnerability type and affected component, wit...
CVE-2025-49751
CVE-2025-49751 is a Windows Hyper-V denial-of-service vulnerability caused by missing synchronization. An authenticated, low-privilege attacker on an adjacent network could trigger the condition and deny service. Public details indicate the issue affects Hyper-V; Microsoft released fixes as part ...
CVE-2025-53149
CVE-2025-53149 describes a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that an authorized, locally authenticated attacker could abuse to achieve local privilege elevation. The CVE is tracked with CVSS 3.1: Local, Low attack complexity, Low privileges required, no u...
CVE-2025-54916
CVE-2025-54916 is a Windows NTFS remote code execution vulnerability described as a stack-based overflow in NTFS. Connected sources confirm NTFS is affected and assign a high severity (CVSS ≈ 7.8). Public sources (including Krebs/NCSC) categorize this as an RCE issue for Windows NTFS, with exploi...
CVE-2025-55236
Technical details for CVE-2025-55236 are not provided in the connected documents. Monitor for updates (no vendor/version/root-cause/fix details in the supplied sources).
CVE-2026-20923
CVE-2026-20923 is a use-after-free in Windows Management Services that allows an authorized, locally situated attacker to elevate privileges. Evidence from Nessus/NVD/CVE records shows this CVE is associated with Windows Management Services and is listed among January 2026 security updates. Remed...
CVE-2026-25181
CVE-2026-25181 is a Windows GDI+ out-of-bounds read vulnerability that allows an attacker to disclose information over the network. The CVE is referenced across NVD/NCSC/EUVD and is documented as a read past bounds in Windows GDI+. Impact described as high confidentiality loss with network-based,...
CVE-2026-26154
Technical details about CVE-2026-26154 are not publicly provided in the supplied documents. Monitor official advisories for updates on affected products, impact, and remediation.
CVE-2026-27923
CVE-2026-27923 is a Windows Desktop Window Manager elevation-of-privilege vulnerability (CVSS 3.1 base 7.8, HIGH). Local attacker with low privileges and no user interaction could exploit in an UNPROVEN-exploit state to achieve high confidentiality, integrity, and availability impact. The entry l...
CVE-2026-33837
CVE-2026-33837 is a heap-based buffer overflow in Windows TCP/IP that could allow an authenticated local attacker to elevate privileges. The entry notes a local, low-attack-complexity vector with no user interaction required and HIGH impact to confidentiality, integrity, and availability, yieldin...
CVE-2026-45598
CVE-2026-45598 is a Windows vulnerability in the Windows Ancillary Function Driver for WinSock described as a use-after-free that enables a local, authorized attacker to achieve privilege elevation . The description is consistent across the NVD entry and the CVE record, noting a LOCAL attack vect...
CVE-2026-45599
The CVE-2026-45599 entry describes a use-after-free in Windows’ Universal Plug and Play component (upnp.dll) that enables a remote attacker to execute code over the network via the UPnP Device Host. The vulnerability is rated CVSSv3.1: 8.1 (HIGH) with Network attack vector, no privileges required...