CVE-2025-59214

CVE-2025-59214 is a Microsoft Windows File Explorer spoofing and information-disclosure vulnerability. Public advisories describe exposure of sensitive information to unauthorized actors, enabling spoofing over a network via Windows File Explorer. Multiple connected sources confirm that Windows F...

CVE-2026-21236

CVE-2026-21236 describes a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock (AFD) that enables an authenticated local attacker to obtain elevated privileges. The vulnerability is categorized as a local, privilege-escalation issue, with the affected component being t...

CVE-2026-26167

CVE-2026-26167 affects Windows Push Notification Core. The vulnerability is a race condition from improper synchronization of a shared resource, enabling a locally authenticated attacker to elevate privileges. IT guidance from the April 2026 Patch Tuesday indicates this EoP issue is among the cri...

CVE-2026-26169

CVE-2026-26169 is a Windows Kernel Memory information-disclosure vulnerability described as a buffer over-read that can leak information to an authorized local attacker. The CVE is listed across multiple feeds (NVD/NCSC/EUVD) with the impact described as local information disclosure and a high co...

CVE-2026-32080

CVE-2026-32080 affects Windows WalletService and is a use-after-free that enables local privilege escalation for an authenticated user. The initial sources and connected advisories confirm impact on Windows WalletService with local execution and privilege elevation. Microsoft has published securi...

CVE-2026-32081

Technical details (affected products, vulnerable components, root cause, exploits, or remediation) are not provided in the supplied documents; monitor for updates from Microsoft.

CVE-2026-34343

CVE-2026-34343 describes a heap-based buffer overflow in Windows’ Application Identity (AppID) Subsystem that could enable local privilege escalation by an authorized attacker. Documented impact is local, with required privileges LOW and no user interaction, consistent with CVSS v3.1 base metrics...

CVE-2026-42907

Technical details (affected software, component, root cause, impact and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-49174

CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...

CVE-2026-50321

CVE-2026-50321 is a Windows USB Driver elevation-of-privilege vulnerability (race condition on a shared resource). An authorized, local attacker could exploit this to gain higher privileges on the affected system, per the NVD entry and cross-referenced sources. Connected advisories corroborate th...

CVE-2026-50356

CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...

CVE-2026-50400

CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...

CVE-2026-50453

CVE-2026-50453 affects the Windows USB Audio Class driver (usbaudio.sys). It is an out-of-bounds read vulnerability that may disclose information and requires physical access (attack vector: physical, base CVSS 6.1). Root cause: memory read past bounds. Impact: information disclosure with a physi...

CVE-2026-50479

CVE-2026-50479 affects the Windows USB Hub Driver via an untrusted pointer dereference, enabling local privilege escalation for an authenticated user. Public sources confirm this vulnerability and Microsoft has released a security update to address it (MSRC vulnerability page). The entry is corro...

CVE-2026-50490

CVE-2026-50490 describes a use-after-free vulnerability in Windows Installer that could allow an authenticated, locally located attacker to elevate privileges. The initial description confirms local privilege escalation with high impact (CVE ID: 2026-50490; vulnerable component: Windows Installer...

CVE-2026-54983

The CVE-2026-54983 entry concerns a stack-based buffer overflow in Active Directory Federation Services (AD FS) that allows an unauthenticated, network-based attacker to trigger a denial of service. The authoritative sources describe the vulnerability as enabling network-ported DoS without requir...

CVE-2026-55001

CVE-2026-55001 affects Windows Active Directory / Active Directory Domain Services. The root cause is improper certificate validation within AD, enabling an authorized attacker to achieve local privilege escalation. CVSS 3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low; User In...

CVE-2026-56182

CVE-2026-56182 is a Windows NTFS elevation-of-privilege vulnerability caused by an integer overflow/wraparound in NTFS operations that can be exploited by an authorized local attacker. Public sources in the connected data corroborate the root cause and the affected component is NTFS on Windows. T...

CVE-2026-58629

CVE-2026-58629 is a Windows DirectX vulnerability described as a use-after-free in the DirectX Graphics Kernel that allows a locally authenticated attacker to elevate privileges. The NVD entry notes a local attack vector with high impact (C/H/I/A all high) and the CVSSv3.1 score of 7.0 (Local, Pr...

CVE-2026-61360

The CVE-2026-61360 entry concerns an issue in Windows GDI described as an untrusted pointer dereference that could allow an authorized attacker to disclose information locally. Affected component is Windows GDI; root cause is a pointer dereference involving untrusted data, enabling local informat...

CVE-2026-62711

The CVE-2026-62711 issue is a local privilege escalation caused by a use-after-free in Windows Win32K. Affected component: Win32K memory management; root cause: use-after-free vulnerability. Impact, if exploited: an authorized local attacker can elevate privileges. CVSS v3.1 score is 7.8 ( HIGH )...

CVE-2026-62718

The CVE-2026-62718 entry concerns an integer underflow (wrap/wraparound) in Windows DHCP Server that enables an unauthorized attacker on an adjacent network to disclose information. This vulnerability affects Windows DHCP Server and is driven by an underflow in handling certain inputs, leading to...

CVE-2026-65671

The CVE-2026-65671 entry describes a heap-based buffer overflow in Windows Remote Access API that allows an authorized attacker to achieve local privilege escalation. The impact is indicated as high (CVSSv3.1 base score 7.8) with local access required and no user interaction. Public details in th...

CVE-2025-48813

Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.

CVE-2025-50155

CVE-2025-50155 corresponds to a local privilege-escalation vulnerability in Windows Push Notifications. Affected component: Windows Push Notifications service. Root cause: access of a resource using an incompatible type (type confusion). Impact: authorized attacker on the same device can escalate...

CVE-2025-50164

CVE-2025-50164 is a Windows RRAS vulnerability described as a heap-based buffer overflow in Routing and Remote Access Service. It enables an authorized attacker to execute code over the network (attack vector: network; authentication: low; user interaction required). The CVSS 3.1 basis in the ini...

CVE-2025-53151

CVE-2025-53151 is a Windows Kernel use-after-free local privilege escalation vulnerability. Connected sources indicate the affected component is the Windows Kernel and that exploitation leads to obtaining elevated privileges locally. Microsoft security updates are referenced in the surrounding ad...

CVE-2025-53721

Technical details are not publicly available in the provided connected documents. The CVE is described as a use-after-free in Windows Connected Devices Platform Service enabling local privilege elevation, but specifics (root cause, affected versions, exploit method, and fix) are not disclosed her...

CVE-2025-54098

Technical details about CVE-2025-54098 (Hyper-V local privilege elevation) are not provided in the connected documents. Monitor for future updates from Microsoft for affected products, impact, and mitigations.

CVE-2025-54113

Summary: CVE-2025-54113 affects Windows Routing and Remote Access Service (RRAS) and is described as a heap-based buffer overflow that allows a remote attacker to execute code over the network. The NCSC advisory lists CVE-2025-54113 with a CVSS v3.1 base score of 7.5 and impact of executing code,...

CVE-2025-55701

Technical details for CVE-2025-55701 (affected product/component/versions, root cause, exploit information, or remediation) are not publicly provided in the connected documents; monitor for updates from official sources.

CVE-2025-58728

CVE-2025-58728 is a Windows Bluetooth Service use-after-free elevation-of-privilege vulnerability. Connected documents corroborate a local, privilege-escalation impact (CVSS-like note: 7.8 HIGH, local access, no user interaction). The NCSC data lists CVE-2025-58728 under Windows Bluetooth Service...

CVE-2025-58730

The CVE-2025-58730 entry is corroborated by connected sources as a local code-execution via a use-after-free in Inbox COM Objects. The KB/MSKB documents listed do not provide vendor/version specifics or a public fix; public details in EUVD-2025-34313/ NCSC-2025-0310 reiterate the issue abstractly...

CVE-2025-58738

CVE-2025-58738 is a local-execution vulnerability caused by a use-after-free in Inbox COM Objects. Reported impact: unauthorized code execution on the affected system with local attacker access. Documented impact aligns with high-severity CVSS metrics (AV: Local, AC: High, PR: None, UI: Required;...

CVE-2025-59200

CVE-2025-59200 describes a race-condition vulnerability in the Data Sharing Service Client where concurrent access to a shared resource allows an unauthorized local attacker to spoof locally. The CVE entry states a base CVSS v3.1 score of 7.7 ( HIGH ), with LOCAL attack vector, LOW confidentialit...

CVE-2026-20814

CVE-2026-20814 is a local privilege-escalation in the Microsoft Graphics Kernel caused by a race condition when accessing a shared resource. An authorized local attacker could elevate privileges on affected Windows systems. The issue is documented in multiple sources (e.g., CVE lists and ENISA EU...

CVE-2026-20828

CVE-2026-20828 is an out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS). The impact is information disclosure and requires physical access (attack vector: PHYSICAL; base score 4.6). Affected: Windows ICS component within Windows. Root cause: out-of-bounds read as descri...

CVE-2026-20833

CVE-2026-20833 is a Windows Kerberos information-disclosure vulnerability. An authorized attacker with local access and low privileges can disclose information due to use of a broken or risky cryptographic algorithm in Kerberos. The CVSSv3.1 base score is 5.5 (Medium); attack vector: Local; user ...

CVE-2026-20872

CVE-2026-20872 affects Windows NTLM: external control of a file name or path allows an attacker to spoof authentication over the network. The description states this vulnerability and related references indicate a Windows NTLM spoofing risk. The connected Nessus/NCSC/EUVD/NVD entries confirm the ...

CVE-2026-21244

CVE-2026-21244 affects Windows Hyper-V with a heap-based buffer overflow that enables local code execution by an authenticated attacker. The CVSS 3.1 vector ( LOCAL, LOW PR, LOW AC, USER INTERACTION REQUIRED, S: U ) indicates high impact to confidentiality, integrity, and availability if exploite...

CVE-2026-32085

CVE-2026-32085 affects Windows Remote Procedure Call and corresponds to an information-disclosure vulnerability that can allow an authenticated local attacker to read sensitive data. The NVD/NCSC/MSRC entries confirm this vulnerability and note that Microsoft has released updates to fix the issue...

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-34331

CVE-2026-34331 involves a race condition in the Windows Win32K GRFX subsystem caused by concurrent access to a shared resource with improper synchronization. This leads to local privilege escalation by an authorized attacker. The provided documents state the issue and impact but do not include ex...

CVE-2026-34349

CVE-2026-34349 describes a local information disclosure in Windows Media where sensitive data is exposed to an unauthorized actor, potentially enabling a local attacker with low privileges and no user interaction to disclose information. The report notes a CVSSv3.1 base score of 5.5 (Medium), wit...

CVE-2026-50313

CVE-2026-50313 is a Windows NTFS heap-based buffer overflow vulnerability that could allow an attacker to achieve local code execution. The CVE entry describes a heap-based overflow in NTFS that enables exploitation by a privileged/unauthenticated attacker with local access, with the NVD entry al...

CVE-2026-50318

CVE-2026-50318 affects the Windows Resilient File System (ReFS). It describes a stack-based buffer overflow that allows an authorized local attacker to elevate privileges. The CVSSv3.1 vector is LOCAL/LOW+LOW/LOW with no user interaction and implies high impact on confidentiality, integrity, and ...

CVE-2026-50354

CVE-2026-50354 involves a use-after-free in the Windows Kernel that enables an authorized local attacker to elevate privileges. The affected source is the Windows Kernel; the vulnerability stems from memory management misuse leading to arbitrary code execution with SYSTEM-level privileges. Exploi...

CVE-2026-50450

CVE-2026-50450 describes a race condition in Windows Wireless Wide Area Network Service where concurrent execution on a shared resource with improper synchronization can allow an authenticated, local attacker to elevate privileges. The CVE is associated with a local exploit vector and a base CVSS...

CVE-2026-50697

The CVE-2026-50697 entry concerns a vulnerability in the Windows Common Log File System Driver that could allow an attacker with local access to elevate privileges. The issue is described as exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public de...

CVE-2026-54119

CVE-2026-54119 describes a loop with an unreachable exit condition in Windows Active Directory that can be exploited to cause a network-based denial of service by an unauthorized attacker. The affected component is Windows Active Directory; the vulnerability stems from an infinite loop, leading t...