CVE-2026-20922

CVE-2026-20922 is a heap-based buffer overflow in Windows NTFS that enables a locally authenticated attacker to execute code. The description and connected sources confirm NTFS as the vulnerable component and local execution as the impact. Public details in the provided documents are consistent w...

CVE-2025-48822

CVE-2025-48822 is an out-of-bounds read vulnerability in Windows Hyper-V that could enable local code execution. The connected NCSC entry explicitly lists the impact as Execution of arbitrary code on Windows Hyper‑V, with CVSS base score 8.6 (LOCAL, HIGH). The documents do not provide additional ...

CVE-2025-55230

CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...

CVE-2026-33098

CVE-2026-33098 affects Windows container isolation via the FS Filter Driver causing Elevation of Privilege. The advisory indicates a LOCAL attack vector with LOW attack complexity and LOW privileges required, no user interaction, and HIGH impact to confidentiality, integrity, and availability. Th...

CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...

CVE-2026-65678

CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...

CVE-2020-0682

Technical details about CVE-2020-0682 are not publicly provided in the supplied documents. No concrete affected product/version or remediation info is available here. Monitor for updates from official advisories.

CVE-2020-0698

Technical details for CVE-2020-0698 are not provided in the connected documents; the sources list the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for updates from official advisories.

CVE-2024-43524

CVE-2024-43524 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available connected documents confirm the affected component as the Windows Mobile Broadband driver and indicate that updates from Microsoft were released to address vulnerabilities in the Windows update ...

CVE-2024-43570

CVE-2024-43570 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm affected software as Windows kernel components and indicate fixes released in October 2024 through MSRC advisories and OS updates (KB5044280/KB5044281/KB5044285) covering multiple Windows builds, wi...

CVE-2024-43581

CVE-2024-43581 is associated with Microsoft OpenSSH for Windows and is described as a Remote Code Execution vulnerability. The Initial document provides a CVSS v3.1 score of 7.1 ( HIGH ) with network attack vector, high impact to confidentiality, integrity, and availability, and requires user int...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

CVE-2025-21223

Technical details about CVE-2025-21223 are not provided in the supplied connected documents. The initial entry notes a Windows Telephony Service RCE, but no vendor/version/impact specifics are disclosed here. Monitor for future updates.

CVE-2025-21239

Technical details about CVE-2025-21239 (affected component, root cause, exploitability, affected products) are not publicly provided in the connected documents. Monitor for updates from Microsoft/NVD CVE entries for new details and fixes.

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-21301

CVE-2025-21301 is a Windows Geolocation Service Information Disclosure vulnerability with CVSS 3.1 base score 6.5 (Network attack, Low attack complexity, Privileges required: Low, User interaction: None). The vulnerability is disclosed as affecting Windows Geolocation Service and is addressed by ...

CVE-2025-32722

CVE-2025-32722 causes improper access control in the Windows Storage Port Driver . The vulnerability could allow an authorized local attacker to disclose information, per the CVE description. CVSSv3.1: Local attack, Low privileges required, no user interaction, Confidentiality impact High, others...

CVE-2026-20820

CVE-2026-20820 is a local privilege-escalation vulnerability caused by a heap-based buffer overflow in the Windows Common Log File System Driver. An authenticated, locally-adjacent attacker could trigger the overflow to obtain higher privileges on the host. The CVE is corroborated by multiple fee...

CVE-2026-20840

CVE-2026-20840 is a Windows NTFS heap-based buffer overflow that enables local code execution by an authorized attacker. The vulnerability affects the Windows NTFS component and is rated with a CVSS v3.1 base score of 7.8 (High) for local, low-attack‑complexity, no user interaction, with high con...

CVE-2026-50451

CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...

CVE-2026-50474

CVE-2026-50474 is a Remote Desktop Client vulnerability described as a use-after-free that allows an unauthenticated attacker to execute code over a network. The affected component is the Remote Desktop Client; the root cause is use-after-free in the client handling of remote sessions. The CVE is...

CVE-2026-50502

CVE-2026-50502 corresponds to a Windows Event Logging Service remote code execution vulnerability. The issue is described as insufficient granularity of access control in the Event Logging Service, enabling an authenticated, network-accessing attacker to run code on the vulnerable system. For con...

CVE-2020-0701

CVE-2020-0701 affects the Windows Client License Service (ClipSVC). The vulnerability arises from how the service handles in-memory objects, allowing a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Impact is elevation of privilege; expl...

CVE-2024-38067

Technical details about CVE-2024-38067 (Windows OCSP Server DoS) are not provided in the supplied connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-43501

CVE-2024-43501 affects the Windows Common Log File System Driver and is a local elevation-of-privilege vulnerability. Triggers could allow an attacker with low privileges to escalate to obtain high-level privileges, with the issue categorized as high severity (CVSS v3.1 base score 7.8). The CVE i...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-49691

CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...

CVE-2025-54109

CVE-2025-54109 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion that can enable local privilege escalation by an authorized attacker. Connected sources (NCSC advisory) list CVE-2025-54109 with a base score of 6.7 (Medium) and attribute the impact to lo...

CVE-2025-55233

CVE-2025-55233 is a Windows Projected File System Elevation of Privilege vulnerability caused by an out-of-bounds read. The CVE affects Windows Projected File System and can be exploited by an authorized local attacker with low privileges and no user interaction to elevate privileges locally (CVS...

CVE-2026-34339

Technical details about CVE-2026-34339 (Windows LDAP denial of service) are not publicly available in the provided connected documents. Monitor for updates from Microsoft/NVD for affected products, vectors, and fixes.

CVE-2026-61925

CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38245

CVE-2024-38245 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. A local attacker could exploit it with low privileges and no user interaction to gain SYSTEM-level access; CVSS v3.1/3.1 vector indicates local access, low complexity, with high impact to confidentiality, int...

CVE-2024-43563

CVE-2024-43563 affects Windows Ancillary Function Driver for WinSock. The vulnerability is an Elevation of Privilege in the driver, with local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. Connected sources corroborat...

CVE-2024-43565

CVE-2024-43565 corresponds to a Windows NAT Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK attack, LOW attack complexity, NO privileges, NO user interaction). The issue is tied to the Windows NAT component and is listed among multiple Microsoft Windows vulnerabilities...

CVE-2024-43575

CVE-2024-43575 (Windows Hyper-V Denial of Service) : The initial docs identify a Denial of Service vulnerability in Microsoft Windows Hyper-V with a base score of 7.5 (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and network-based exploitation requiring no privileges or user interaction, leadin...

CVE-2024-49111

CVE-2024-49111 is a Windows Wireless Wide Area Network Service elevation-of-privilege vulnerability. The CVSS 3.1 base metrics show a MEDIUM severity (6.6), with the attack vector as physical and low privileges required , no user interaction, and impacts to confidentiality, integrity, and availab...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21246

CVE-2025-21246 is a Windows Telephony Service remote code execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and network attack vector. The provided connected documents confirm this CVE and indicate Microsoft has released updates to address it (e.g., KB5050009 and related January 2...

CVE-2025-21289

CVE-2025-21289 is a denial-of-service vulnerability in Microsoft Message Queuing (MSMQ). Public details in the provided documents show a network‑accessible issue with a CVSS 3.1 base score of 7.5 (HIGH) where no user interaction is required and no privileges are needed to trigger the impact of de...

CVE-2025-21306

CVE-2025-21306 corresponds to a remote code execution vulnerability in Windows Telephony Service. The issue is mapped to Windows Telephony Service and is rated high (CVSSv3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm the affected component and vulnerability type; root ...

CVE-2025-21339

CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...

CVE-2025-33057

CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...

CVE-2026-45592

CVE-2026-45592 describes an integer overflow/wraparound in Windows Internet (wininet.dll) that enables local privilege escalation for an authorized attacker. The CVSS 3.1 metrics indicate a HIGH impact across confidentiality, integrity, and availability, with a LOCAL attack vector, LOW privileges...

CVE-2026-59128

The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...

CVE-2026-65795

CVE-2026-65795: Windows DNS contains a local elevation of privileges issue. An authorized attacker can elevate privileges locally. CVSS v3.1 reflects LOCAL attack vector, HIGH confidentiality/integrity/availability impact, with HIGH privileges required and no user interaction. Exploitation detail...

CVE-2020-0679

Technical details about CVE-2020-0679 are not publicly provided in the connected documents. Based on the initial description, no concrete product/version/root-cause is disclosed here. Monitor for updates from official sources to obtain specifics and remediation.

CVE-2024-38136

Technical details about CVE-2024-38136 (Windows Resource Manager PSM Service Extension Elevation of Privilege) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE records for affected products and fixes.