CVE-2026-49180

This CVE concerns the Universal Plug and Play component upnp.dll, where an improper link resolution before file access (link following) can lead to local information disclosure. The entry notes that an authorized attacker can disclose information locally, with a CVSS base score of 5.5 (Medium). A...

CVE-2026-49791

CVE-2026-49791 affects Windows Routing and Remote Access Service (RRAS). The issue is an improper link resolution before file access (link following) that can allow an authorized, local attacker to elevate privileges. The vulnerability is triggered locally with low attack complexity and low privi...

CVE-2026-50358

CVE-2026-50358 is a Windows Media use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free in Windows Media code path. Impact: local privilege escalation with high severity as per Microsoft guid...

CVE-2026-50377

CVE-2026-50377 is a Windows Kernel elevation-of-privilege vulnerability described as an out-of-bounds read that enables an authorized local attacker to gain higher privileges. The connected materials consistently identify the Windows Kernel as the affected component and state the root cause as a ...

CVE-2026-50401

CVE-2026-50401 describes an information disclosure in the Windows Cloud Files Mini Filter Driver due to an out-of-bounds read. The impact is local and depends on the attacker already having some level of privileges, with a high confidentiality impact reported in the CVE; the advisory notes an aut...

CVE-2026-50449

CVE-2026-50449 is a Windows Runtime use-after-free vulnerability that allows an authorized, local attacker to escalate privileges. Reported impact is local elevation of privileges with CVSS 3.1/3.1 vector: Local, High severity (7.0). Microsoft has released updates (KB5095051, KB5101649, KB5101650...

CVE-2026-58526

Technical details (affected product/component/root cause/versions/exploit info) are not publicly available in the provided documents. Monitor updates from NVD/CVE records and vendor advisories for any forthcoming specifics.

CVE-2026-58610

CVE-2026-58610: A heap-based buffer overflow in Microsoft Windows Media Foundation is described as allowing an unauthorized attacker to execute code locally. The NVD entry confirms the vulnerability and impact (local code execution) with a CVSS 3.1 base score of 7.8 (HIGH) and a local attack vect...

CVE-2025-53719

CVE-2025-53719 affects Windows Routing and Remote Access Service (RRAS); an uninitialized resource in RRAS can allow an authorized network attacker to disclose information. The issue is tied to RRAS in Windows, with CVSS v3.1 base score 5.7 (Network, Low attack complexity, Privileges required: Lo...

CVE-2025-53804

CVE-2025-53804 affects the Windows Kernel and involves exposure of sensitive information to an unauthorized actor, allowing local disclosure. The threat is categorized with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with low complexity, where privileges are low and no user i...

CVE-2025-54102

CVE-2025-54102 is a use-after-free in the Windows Connected Devices Platform Service that allows an authenticated, local attacker to escalate privileges (obtain increased entitlements). The connected documents corroborate the local-privilege-escalation impact (NCSC advisory lists CVE-2025-54102 w...

CVE-2025-55699

CVE-2025-55699 is listed in the connected NCSC MS security advisories as a Windows Kernel vulnerability with impact described as “Access to sensitive data.” The initial description also notes local disclosure exposure in Windows Kernel. The connected documents do not provide a root-cause detail, ...

CVE-2025-58716

CVE-2025-58716 affects Microsoft Windows Speech and is caused by improper input validation, enabling an authorized attacker to perform local privilege escalation. The CVE is documented with a CVSS v3.1 base score of 8.8 (High) and LOCAL attack vector, requiring LOW privileges and no user interact...

CVE-2025-59255

CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...

CVE-2025-59517

CVE-2025-59517 is a Windows Storage VSP Driver elevation of privilege vulnerability caused by improper access control. Exploitation would enable a locally authenticated attacker to elevate privileges on affected Windows systems. Connected documents confirm this is tied to the Windows Storage VSP ...

CVE-2025-62474

CVE-2025-62474 is a Windows Remote Access Connection Manager Elevation of Privilege vulnerability. It involves improper access control in the Remote Access Connection Manager, enabling a locally authenticated attacker (low privileges, no user interaction) to obtain elevated rights. CVSS v3.1 base...

CVE-2025-64661

CVE-2025-64661 – Windows Shell Elevation of Privilege is supported by connected sources. The vulnerability involves a race condition in concurrent execution using a shared resource in Windows Shell, allowing an authorized local attacker to elevate privileges. Connected documents confirm impact as...

CVE-2026-21508

CVE-2026-21508 concerns improper authentication in Windows Storage, enabling a locally authenticated attacker to elevate privileges. The CVSS v3.1 base score is 7.0 (HIGH), with LOCAL attack vector, HIGH impact on confidentiality, integrity, and availability, and a HIGH attack complexity requirin...

CVE-2026-23671

CVE-2026-23671 is a Windows Bluetooth RFCOM Protocol Driver elevation of privilege vulnerability. A locally exposed issue could allow an attacker with low privileges and no user interaction to escalate privileges via the Bluetooth stack’s RFCOM Protocol Driver; exploitation maturity is UNPROVEN. ...

CVE-2026-24285

Technical details about CVE-2026-24285 are not provided in the given documents. Monitor for updates from Microsoft and CVE records for affected products, impact, and mitigations.

CVE-2026-27911

Technical details not publicly available in the provided documents. Monitor for updates on affected products, vulnerable component, impact, and remediation.

CVE-2026-27914

CVE-2026-27914 affects the Microsoft Management Console (MMC). It is an Elevation of Privilege vulnerability where a local attacker with low privileges and no user interaction can potentially gain high impact on confidentiality, integrity, and availability due to the underlying root cause describ...

CVE-2026-32083

CVE-2026-32083 pertains to Windows’ Simple Search and Discovery Protocol (SSDP) Service elevation of privilege. The vulnerability is local, with low privileges required and no user interaction, and yields a high impact on confidentiality, integrity, and availability. Microsoft lists an official f...

CVE-2026-32165

The CVE-2026-32165 entry describes a Windows UI Core Elevation of Privilege vulnerability. It has a CVSS 3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction, but a changed scope. Affects Windows UI Core component; impacts confidentiality, integr...

CVE-2026-49171

The CVE-2026-49171 entry describes a Use-After-Free vulnerability in Windows Speech Runtime that enables a locally authenticated attacker to elevate privileges. Affected: Microsoft Windows Speech Runtime components; root cause: use-after-free leading to arbitrary code or privilege escalation (det...

CVE-2026-49797

CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.

CVE-2026-50311

CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...

CVE-2026-50331

CVE-2026-50331 is a Windows Application Model Core API elevation-of-privilege vulnerability caused by a use-after-free issue. It affects the Windows Application Model Core API component and allows an authorized attacker with local access to elevate privileges. Microsoft has issued updates to addr...

CVE-2026-50337

CVE-2026-50337 is a Windows Notification vulnerability described as an issue with an incorrect type conversion or cast that allows an authorized attacker to achieve local privilege escalation. The CVE is listed with a CVSS v3.1 base score of 7.8 (HIGH), indicating a local attack vector with low c...

CVE-2026-50355

CVE-2026-50355 is a vulnerability in Active Directory Federation Services (AD FS) described as a stack-based buffer overflow that enables a remote, unauthenticated attacker to cause a denial of service over the network. The CVSS v3.1 base score is 7.5 (Network, Low attack complexity, No privilege...

CVE-2026-50374

CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...

CVE-2026-50417

CVE-2026-50417 is a Windows NTFS heap-based buffer overflow that could allow an authenticated, local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components and is described as a local, privilege-leveraging scenario with HIGH impact (CVE-3.1, base score 7.8). Connect...

CVE-2026-50421

CVE-2026-50421 is a Windows vulnerability in Windows Connected User Experiences and Telemetry described as a local privilege escalation via a resource access type confusion. The CVE entry is supported by multiple records: NVD/NCSC/CIRCL indicate the issue and Microsoft has released updates to add...

CVE-2026-50476

Microsoft Windows CVE-2026-50476 is a local privilege-escalation vulnerability in the Windows Network Connections Service caused by a use-after-free. Affected component is the Windows Network Connections Service; root cause is a use-after-free condition that enables an authorized attacker to elev...

CVE-2026-50478

CVE-2026-50478 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry cites a Windows Kernel UAF issue with a high overall impact (CVSS v3.1: 7.8, Local, Privilege Escalation, Integrity/Confidentiality/Availability: High). Con...

CVE-2026-57093

CVE-2026-57093 – Windows Ancillary Function Driver for WinSock is a reported use-after-free vulnerability in the WinSock ancillary function driver that can be exploited locally to achieve privilege escalation. The issue affects the specific Windows driver handling WinSock operations; successful e...

CVE-2025-49761

CVE-2025-49761 is a Windows Kernel local privilege escalation (Use-after-free) vulnerability. The connected data confirms an effect: “Obtaining elevated privileges” with CVSS v3.1 base metrics indicating LOCAL, low attack complexity and privileges required, high impact to confidentiality/integrit...

CVE-2025-53153

Technical details about CVE-2025-53153 (RRAS information disclosure) are not provided in the connected documents; available sources only reiterate the use of an uninitialized resource in RRAS. Monitor for updates.

CVE-2025-58737

CVE-2025-58737 is a Windows Remote Desktop Protocol (RDP) Remote Code Execution vulnerability described as a use-after-free in the Remote Desktop implementation that allows a local attacker to execute code. The CVE entry shows a base score of 7.0 (HIGH) with LOCAL access, HIGH confidentiality/int...

CVE-2025-58739

CVE-2025-58739 affects Windows File Explorer and is described as the exposure of sensitive information to an unauthorized actor, enabling spoofing over a network. The CVSS 3.1 base score is 6.5 (Network, Low attack complexity, No privileges, User interaction required) with Confidentiality impact ...

CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2026-20866

CVE-2026-20866 is a race condition in Windows Management Services caused by concurrent access to a shared resource without proper synchronization, leading to local privilege escalation. Affected component: Windows Management Services. Impact: elevated privileges locally. The connected documents i...

CVE-2026-21222

CVE-2026-21222 is a Windows Kernel information-disclosure vulnerability where insertion of sensitive data into a kernel log file could allow a locally authenticated attacker with LOW privileges to read sensitive data (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The connected sources confirm t...

CVE-2026-21234

CVE-2026-21234 concerns Windows Connected Devices Platform Service where a race condition due to improper synchronization enables local privilege escalation for an authorized attacker. The vulnerability affects the platform service's concurrent execution via a shared resource; impact includes con...

CVE-2026-25166

CVE-2026-25166 /Windows System Image Manager ADK: A.local, low-privilege, no-user-interaction remote code execution vulnerability with high impact (C/H/I/A) per CVSS 3.1; fix is an official update. Exploitation details are not provided in the document.

CVE-2026-50347

CVE-2026-50347 is a Windows Data.dll vulnerability characterized by a heap-based buffer overflow that allows an unauthorized, local attacker to execute code. The affected component is Windows Data.dll; the underlying issue is a heap overflow leading to remote-code-execution-style impact via local...

CVE-2026-50435

CVE-2026-50435 (Windows Overlay Filter): A buffer over-read in the Windows Overlay Filter enables a locally authenticated attacker to elevate privileges. The exploitation context is local with low attack complexity and no user interaction, and the impact is elevation of privileges with high confi...

CVE-2026-50504

CVE-2026-50504 is a buffer over-read affecting the Windows Remote Desktop Client that can disclose information to an unauthenticated, network-attached attacker. The description and linked CVE entries consistently indicate the underlying issue is a buffer over-read in the Remote Desktop Client, en...

CVE-2026-54109

CVE-2026-54109 : Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized local attacker to execute code. The NVD entry confirms a local-execution impact with high severity (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Details in connected sources show the vulnerabilit...

CVE-2025-53135

CVE-2025-53135 is a race-condition based local privilege-escalation in the Windows DirectX graphics stack. Public description indicates concurrent execution on a shared resource allows an authorized, locally authenticated user to elevate privileges. The CVE is listed in Windows DirectX entries as...