CVE-2026-69845

Windows DHCP Server is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network without any user interaction or prior privileges. The vulnerability is rated CRITICAL (CVSS 9.8) with high impact to confidentiality, integrity, an...

CVE-2026-72981

CVE-2026-72981 is a use-after-free vulnerability in Microsoft's IP Helper component that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigns a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that ...

CVE-2024-43515

CVE-2024-43515 is described in the provided documents as an Internet Small Computer Systems Interface (iSCSI) Denial of Service vulnerability with CVSS v3.1 base score 7.5. The NCSC advisory explicitly lists CVE-2024-43515 under Windows iSCSI as a 7.50 Denial-of-Service, indicating a DoS impact f...

CVE-2024-43557

CVE-2024-43557 is a Windows Mobile Broadband Driver vulnerability categorized as a Denial-of-Service. The initial entry assigns a CVSS 3.1 base score of 6.5 (AV:A, AC:L, PR:N, UI:N, S:U, C:N, I:N, A:H). Connected documents confirm Windows-wide advisories and fixes addressing this family of issues...

CVE-2024-49087

CVE-2024-49087 affects the Windows Mobile Broadband Driver in Windows. It is an information-disclosure vulnerability in the Mobile Broadband component, with CVSS v3.1 base score 4.6 (AV: Physical, AC: Low, PR: None, UI: None, S: Unchanged; C: High, I: None, A: None). Exploitation requires physica...

CVE-2025-32713

CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...

CVE-2025-49724

CVE-2025-49724 is a Use-After-Free vulnerability in Windows Connected Devices Platform Service that can lead to remote code execution over the network. According to initial data, impact is high (C/H/I/A) with CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U. Connected documents confirm the vulnerability exists ...

CVE-2025-55234

CVE-2025-55234 (Windows SMB Relay Elevation of Privilege) : The vulnerability relates to SMB Server relay attacks that can escalate privileges when signing and EPA protections are not enabled. Public docs indicate SMB Server signing and Extended Protection for Authentication (EPA) exist as harden...

CVE-2026-33104

CVE-2026-33104 is a Windows Win32K - GRFX race condition vulnerability rated CVSS v3.1 7.0 (High) with local privilege escalation impact. The connected sources label this as a Win32K-GRFX issue enabling “Obtain increased privileges” and reference Microsoft Windows updates guidance, but the provid...

CVE-2026-40382

CVE-2026-40382 is a use-after-free vulnerability in Windows Telephony Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 vector indicates a Local, Low-privilege, No-UI, with High confidentiality, integrity, and availability impact (base score 7.8). The connected ...

CVE-2026-42975

CVE-2026-42975 affects the Windows Bluetooth Port Driver and is caused by a heap-based buffer overflow. This can allow an unauthenticated attacker to execute code on a target system over an adjacent network. The documented impact is high (remote code execution with full device compromise) and the...

CVE-2026-50647

CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...

CVE-2026-62755

CVE-2026-62755 affects the Windows DHCP Client. The vulnerability is a stack-based buffer overflow in the DHCP client component, leading to local privilege escalation for an authorized attacker. The CVSS 3.1 vector indicates Local attack, Low attack complexity, Low privileges required, with no us...

CVE-2026-62880

Windows CVE-2026-62880 is an out-of-bounds read in Windows NTFS that enables an authorized local user to elevate privileges. Impact: local escalation of rights with high confidentiality/integrity/availability impact per the NVD metrics. The root cause is an out-of-bounds read in NTFS handling. Th...

CVE-2026-69276

CVE-2026-69276 is an integer underflow (wrap or wraparound) in the Microsoft UxTheme Library (uxtheme.dll) that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) , reflecting network-based attack vector with no privileges or us...

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-49103

CVE-2024-49103 affects Windows Wireless Wide Area Network Service (WwanSvc). It is an information disclosure vulnerability with CVSS 3.1 (AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N); attacker needs physical access (per the vector). The connected documents confirm the vulnerability description but do not...

CVE-2025-21304

CVE-2025-21304 affects the Windows DWM Core Library (Desktop Window Manager). The connected sources confirm a local elevation of privilege vulnerability in the DWM Core Library, with the CVSS 3.1 metrics indicating local attack vector, low attack complexity, and need for low privileges, leading t...

CVE-2025-32716

CVE-2025-32716 (Windows Media) is a Windows component vulnerability described as an out-of-bounds read that enables a locally authenticated attacker to elevate privileges. The NCSC advisory lists CVE-2025-32716 under Windows Media with a base impact of 7.80 (Obtaining elevated privileges). No exp...

CVE-2025-33066

CVE-2025-33066 is associated with Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2025-33066 under RRAS with an impact of “Execute Random Code” and a network-exploitable vector, indicating a heap-based buffer overflow that could allow remote code execution....

CVE-2025-59280

CVE-2025-59280 affects the Windows SMB Client and is described as an improper authentication vulnerability that allows an unauthorized attacker to tamper over the network. The CVSSv3.1 vector from the initial document is: AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N with a base score of 3.1 (Low). Connect...

CVE-2026-20849

CVE-2026-20849 is a Windows Kerberos elevation of privilege vulnerability caused by reliance on untrusted inputs in a security decision. The description indicates an authorized attacker could elevate privileges over a network. The provided documents give a CVSS v3.1 base score of 7.5 (Network, Hi...

CVE-2026-26153

CVE-2026-26153 describes an out-of-bounds read in the Windows Encrypting File System (EFS) that could allow an authorized, locally authenticated attacker to obtain elevated privileges. The vulnerability is associated with EFS in Windows and is listed across multiple sources (NVD, CVE databases, M...

CVE-2026-27915

CVE-2026-27915 affects Windows UPnP Device Host. It enables local privilege escalation with a low attack complexity and no user interaction, requiring limited privileges and resulting in high confidentiality, integrity, and availability impact. The CVSSv3.1 base score is 7.8 ( HIGH ), with exploi...

CVE-2026-34335

Use-after-free in the Windows Ancillary Function Driver for WinSock is the root cause of CVE-2026-34335. The vulnerability can allow an authenticated, local attacker to elevate privileges. The CVSSv3.1 score is 7.0 (High) with local attack vector, high complexity, and requires low privileges and ...

CVE-2026-42837

CVE-2026-42837 describes a buffer over-read in the Windows Projected File System Filter Driver that allows an authenticated local attacker to elevate privileges. The affected component is the Windows Projected File System Filter Driver; root cause is a buffer over-read within the filter driver. T...

CVE-2026-50330

CVE-2026-50330 is a Windows Remote Desktop Client vulnerability described as a heap-based buffer overflow that allows an unauthenticated attacker to escalate privileges over the network. The CVE appears in multiple sources (NVD, EUVD, CIRCL) with consistent language about privilege elevation via ...

CVE-2026-56174

The CVE-2026-56174 entry describes an elevation of privilege in Windows Narrator Braille caused by an untrusted search path. An authorized local attacker can exploit this to gain higher privileges. CVSS:3.1 base score 7.8 (HIGH); attack vector LOCAL; privileges required LOW; user interaction NONE...

CVE-2026-61347

CVE-2026-61347 describes a buffer over-read in Windows Event Logging Service that allows an authorized attacker with LOW privileges and local access to disclose information. The CVSS 3.1 metrics indicate a MEDIUM base score (5.5), with LOCAL attack vector, low attack complexity, no user interacti...

CVE-2026-70346

CVE-2026-70346 is a Windows Installer vulnerability: a stack-based buffer overflow could allow an authorized, local attacker to elevate privileges. The description indicates local execution with high impact, but the documents do not provide exploit details or a remediation/patch. Exploitation sta...

CVE-2024-38261

Technical details about CVE-2024-38261 are not provided in the connected documents. The RRAS RCE entry is described, but no exploit specifics, affected versions, or remediation steps are included here. Monitor for updates.

CVE-2024-43453

CVE-2024-43453 affects Windows Routing and Remote Access Service (RRAS). The RRAS component is vulnerable to remote code execution (CVE-2024-43453) with a CVSSv3.1 vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). The issue targets RRAS functionality and is linked to a total i...

CVE-2024-43545

CVE-2024-43545 is a Windows OCSP (Online Certificate Status Protocol) Server Denial of Service vulnerability. The available documents identify the affected component as the Windows OCSP service and classify the impact as Denial of Service with a CVSS v3.1 base score of 7.5 (Network attack, low at...

CVE-2024-49110

CVE-2024-49110 is listed in the Windows Mobile Broadband driver category as a privilege-escalation vulnerability. It is described with a CVSS v3.1 base score of 6.8 (medium), with physical access as attack vector, no user interaction, and impact to confidentiality, integrity, and availability rat...

CVE-2025-21218

CVE-2025-21218 is cataloged as a Windows Kerberos Denial of Service vulnerability with CVSS 3.1, base score 7.5 (HIGH). The description and connected sources confirm the issue is a DoS affecting Windows Kerberos, but the provided documents do not specify affected product versions, root cause deta...

CVE-2025-29840

CVE-2025-29840 is a Windows component issue in Windows Media where a stack-based buffer overflow enables remote code execution over the network (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; CVSSv3.1 base 8.8). The connected sources indicate this is tracked as a Windows Media vulnerability with high sever...

CVE-2025-47971

CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...

CVE-2025-49743

CVE-2025-49743 is a local privilege-escalation vulnerability in the Microsoft Graphics Component caused by a race condition due to improper synchronization when a shared resource is accessed concurrently. The issue affects Windows graphics-related code paths and can let an authorized, local attac...

CVE-2026-32149

CVE-2026-32149 is a Windows Hyper-V remote code execution vulnerability. The issue involves a local attack vector (AV: Local) with low attack complexity (AC: Low) and privileges required (PR: Low) that requires user interaction (UI: Required). Impact is high on confidentiality, integrity, and ava...

CVE-2026-42903

Windows Kerberos in Windows is affected by CVE-2026-42903, a null pointer dereference that can be exploited by an authorized attacker over the network to cause a denial of service. The CVSS data indicates network access with low attack complexity, low privileges required, no user interaction, and...

CVE-2026-50427

CVE-2026-50427 affects Content Delivery Manager. Description: use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVSS v3.1: 7.8 (Local, Low user interaction, Privilege Escalation, high impact on confidentiality, integrity, availability). Connected sourc...

CVE-2026-61345

CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...

CVE-2026-62700

CVE-2026-62700 describes a heap-based buffer overflow in Windows NTFS that allows an authenticated, local attacker to elevate privileges. The vulnerability affects the NTFS component on Windows and is rated CVSSv3.1#3.1 with a base score of 7.8 (HIGH) and local attack vector/low complexity, requi...

CVE-2026-62719

CVE-2026-62719 describes a heap-based buffer overflow in Windows Message Queuing that allows an authorized, locally-authenticated attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with Local attack vector, Low attack complexity, and privileges required. The impact is Conf and Inte...

CVE-2026-65814

CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver enabling local privilege escalation for an authorized attacker. Documents provide only the generic impact; no specific affected Windows versions or patch details are available. Exploitation status is not described in the co...

CVE-2024-38262

CVE-2024-38262 is a Windows Remote Desktop Licensing Service Remote Code Execution vulnerability. The CVE entry lists a 3.1.1 CVSSv3.1 base score of 7.5 (High) with network as the attack vector, requiring low privileges and no user interaction, and resulting in high confidentiality, integrity, an...

CVE-2024-43521

CVE-2024-43521 is a Windows Hyper-V Denial of Service vulnerability. Publicly available references confirm the issue affects Microsoft Windows Hyper-V and assigns a CVSS v3.1 base score of 7.5 (Network attack vector, low attack complexity, no privileges, no user interaction, availability impact)....

CVE-2024-43525

CVE-2024-43525 refers to a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 6.8 (Medium) with an attack vector of Physical, requiring no privileges and no user interaction, and impacting confidentiality, integrity, and availability...

CVE-2024-43526

Technical details (affected product/version, root cause, impact, or fix) for CVE-2024-43526 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2024-43593

CVE-2024-43593 is listed in the Windows RRAS category with high severity (CVSS v3.1 ~8.8) and is described as a remote code execution vulnerability. Connected sources (NCSC) indicate it affects Windows RRAS and assigns an 8.80 rating for Execute Random Code. The NVD entry confirms RRAS Remote Cod...