CVE-2026-42903

Windows Kerberos in Windows is affected by CVE-2026-42903, a null pointer dereference that can be exploited by an authorized attacker over the network to cause a denial of service. The CVSS data indicates network access with low attack complexity, low privileges required, no user interaction, and...

CVE-2026-48564

CVE-2026-48564 refers to a heap-based buffer overflow in Windows DHCP Server that enables a network-based remote code execution by an authorized attacker. According to the available records, the vulnerability is high severity (CVSS v3.1: 8.8), with network as the attack vector, low attack complex...

CVE-2026-61356

CVE-2026-61356 : The vulnerability concerns Windows Remote Desktop Services . The issue is described as “Missing authentication for a critical function,” enabling an elevation of privileges attack from a local, authenticated position. The CVSS 3.1 score is reported as 7.8 (HIGH) with local access...

CVE-2026-65775

CVE-2026-65775 maps to a local privilege escalation due to a use-after-free in Windows Win32K. The affected component is Win32k in Windows; the underlying flaw is use-after-free, enabling an authorized attacker to elevate privileges locally (CVSS v3.1: 7.8, HIGH). The impact stated includes high ...

CVE-2025-21331

CVE-2025-21331 is a Windows Installer Elevation of Privilege vulnerability. The connected documents confirm it is a local privilege escalation (attack vector: LOCAL, requires LOW privileges and USER interaction) with high impact (C:H/I:H/A:H) per CVSS 3.1. Public details in the NCSC advisory cate...

CVE-2025-29956

Technical details (affected components, vulnerable versions, exploitability, and remediation) are not provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for CVE-2025-29956.

CVE-2025-64678

CVE-2025-64678 is a Windows RRAS heap-based buffer overflow vulnerability that allows a network-based attacker to achieve remote code execution. The NVD entry confirms the flaw, with a CVSS v3.1 base score of 8.8 (High), indicating a network attack vector, no privileges required, and user interac...

CVE-2026-27915

CVE-2026-27915 affects Windows UPnP Device Host. It enables local privilege escalation with a low attack complexity and no user interaction, requiring limited privileges and resulting in high confidentiality, integrity, and availability impact. The CVSSv3.1 base score is 7.8 ( HIGH ), with exploi...

CVE-2026-42972

CVE-2026-42972 describes a Windows Hyper-V information disclosure vulnerability. The issue allows a locally authenticated attacker (low privileges) to disclose sensitive information due to exposure of information to an unauthorized actor. CVSS 3.1/Local, Low complexity, Privileges Low, Confidenti...

CVE-2026-44812

CVE-2026-44812 affects Windows graphics component Win32K GRFX, where an integer overflow/wraparound in GRFX can allow an unauthorized attacker to execute code locally. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Exploitation details are not provide...

CVE-2026-45635

CVE-2026-45635 affects Windows UPnP Device Host through a use-after-free in upnp.dll, enabling remote code execution over the network. The issue is tied to the Universal Plug and Play component, with impact described as remote, unauthenticated code execution; CVSSv3.1 base score 8.1 (HIGH). Affec...

CVE-2026-48574

CVE-2026-48574 is a Windows Media vulnerability described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The cited CVSS 3.1 vector (LOCAL, HIGH impact on confidentiality, integrity, and availability; user interaction required; no privileges required)...

CVE-2026-49177

CVE-2026-49177 is a Windows TCP/IP vulnerability described as an out-of-bounds read that allows an authenticated, local attacker to disclose information. The CVE is supported by multiple sources in the Connected documents (NVD/NCSC/EUVD), which identify the affected component as Windows TCP/IP an...

CVE-2026-65799

CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...

CVE-2026-70345

CVE-2026-70345 describes a heap-based buffer overflow in Windows Installer that enables a locally authenticated attacker to achieve elevation of privilege. The root cause is a heap-based overflow within the Windows Installer process, with an attacker requiring local access and no user interaction...

CVE-2025-48803

CVE-2025-48803 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is a missing integrity check in the Enclave, enabling an authorized local attacker to obtain elevated privileges. The NCSC aggregation also lists CVE-2025-48803 with an impact of gaining elevated privileges...

CVE-2025-49689

Technical details for CVE-2025-49689 (affected product/component/impact) are not publicly available in the provided documents. Monitor for updates from official sources; no concrete vendor/version/exploit information is available here.

CVE-2025-59280

CVE-2025-59280 affects the Windows SMB Client and is described as an improper authentication vulnerability that allows an unauthorized attacker to tamper over the network. The CVSSv3.1 vector from the initial document is: AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N with a base score of 3.1 (Low). Connect...

CVE-2026-40382

CVE-2026-40382 is a use-after-free vulnerability in Windows Telephony Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 vector indicates a Local, Low-privilege, No-UI, with High confidentiality, integrity, and availability impact (base score 7.8). The connected ...

CVE-2026-45655

CVE-2026-45655 affects Windows BitLocker. The description indicates a protection mechanism failure that could allow an unauthorized attacker to bypass a security feature via a physical attack. The connected documents provide the following details: CVSSv3.1 base score 5.3 (Medium), attack vector P...

CVE-2026-59136

CVE-2026-59136 affects Microsoft COM for Windows due to use of an uninitialized resource, enabling a locally authorized attacker to disclose information. The vulnerability impact is information disclosure with a CVSS v3.1 base score of 5.5 (Medium); attack requires local access, low privileges, a...

CVE-2026-61939

CVE-2026-61939 is a Winlogon-use-after-free vulnerability that allows an authorized, low-privilege attacker to elevate privileges locally. Public description confirms local access as attack vector (LOCAL) with high impact on confidentiality, integrity, and availability. The CVSS 3.1 vector is AV:...

CVE-2026-62880

Windows CVE-2026-62880 is an out-of-bounds read in Windows NTFS that enables an authorized local user to elevate privileges. Impact: local escalation of rights with high confidentiality/integrity/availability impact per the NVD metrics. The root cause is an out-of-bounds read in NTFS handling. Th...

CVE-2025-29830

Technical details about CVE-2025-29830 are not provided in the connected documents. The available data only notes a RRAS information disclosure vulnerability. Monitor official sources for updates on affected products, root cause, and remediation.

CVE-2025-29960

CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) can lead to information disclosure over the network. The description specifies network-based access with high confidentiality impact; no explicit product version or fix details are provided in the connected doc...

CVE-2025-29961

Technical details for CVE-2025-29961 are not provided in the connected documents. The RRAS out-of-bounds read description exists in the Initial Document, but no vendor/affected versions, root cause, or fixes are confirmed here. Monitor for updates.

CVE-2025-54101

CVE-2025-54101: Use-after-free in Windows SMBv3 Client can lead to remote code execution by an authorized attacker over the network. The Connected documents confirm this SMBv3 Client issue and tie remediation to the September 2025 Windows updates that address SMB-related vulnerabilities (e.g., SM...

CVE-2026-21248

CVE-2026-21248 describes a heap-based buffer overflow in Windows Hyper-V. The vulnerability allows an authorized, locally-privileged attacker to execute code on the affected host. The CVSS v3.1 metrics indicate LOCAL attack vector, LOW attack complexity and LOW privileges required, with UI access...

CVE-2026-35422

Technical details for CVE-2026-35422 (affected components, root cause, impact, or patch) are not provided in the connected documents. Monitor for authoritative updates from official sources.

CVE-2026-50411

CVE-2026-50411 affects Active Directory Federation Services (AD FS) and is described as a stack-based buffer overflow that enables a remote attacker to cause a denial of service over the network. Public references in the connected documents confirm the DoS impact and Microsoft has released update...

CVE-2026-61367

The CVE-2026-61367 entry describes a local Privilege Escalation in Windows Remote Desktop Services caused by missing authentication for a critical function. An authorized attacker can elevate privileges locally (ATT&CK-style: Privilege Escalation) with a CVSSv3.1 base score of 7.8 (HIGH) and LOCA...

CVE-2026-62881

The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...

CVE-2026-62894

CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...

CVE-2026-65678

CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...

CVE-2025-29957

Technical details about CVE-2025-29957 (Windows Deployment Services) are not provided in the supplied documents. Please monitor for updated advisories from Microsoft or NVD for affected product/version, root cause, impact, and remediation.

CVE-2025-47980

Technical details about CVE-2025-47980 (affected product/components, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates as more information becomes public.

CVE-2025-49667

Technical details about CVE-2025-49667 are not publicly provided in the supplied connected and initial documents. Monitor for updates from official advisories; current materials only indicate a local privilege escalation via Win32K ICOMP without specifics.

CVE-2026-50474

CVE-2026-50474 is a Remote Desktop Client vulnerability described as a use-after-free that allows an unauthenticated attacker to execute code over a network. The affected component is the Remote Desktop Client; the root cause is use-after-free in the client handling of remote sessions. The CVE is...

CVE-2026-61932

The CVE-2026-61932 entry describes a type confusion vulnerability in the Windows DWM Core Library that allows an authorized attacker to achieve local privilege escalation . Affected component is the Windows DWM Core Library; root cause is resource access via incompatible type. The provided docume...

CVE-2026-62698

The CVE-2026-62698 entry concerns a numeric truncation error in Microsoft Digest Authentication. The vulnerability is described as enabling a locally authenticated attacker to achieve privilege elevation (base score 7.8, CVSS 3.1, LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2026-62733

CVE-2026-62733 is an out-of-bounds read in Windows Win32K that allows a locally authenticated attacker to elevate privileges. The vulnerability affects Win32K components and yields a Local Privilege Escalation (LPE) with HIGH impact to confidentiality, integrity, and availability (per CVSS 3.1: A...

CVE-2026-62757

Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...

CVE-2026-62785

CVE-2026-62785: Heap-based buffer overflow in Windows LDAP (Lightweight Directory Access Protocol) allows unauthenticated remote code execution over the network. Affected: Windows LDAP service. Root cause: improper heap handling leading to overflow. Impact: remote code execution with high severit...

CVE-2026-65795

CVE-2026-65795: Windows DNS contains a local elevation of privileges issue. An authorized attacker can elevate privileges locally. CVSS v3.1 reflects LOCAL attack vector, HIGH confidentiality/integrity/availability impact, with HIGH privileges required and no user interaction. Exploitation detail...

CVE-2025-49708

CVE-2025-49708: A use-after-free vulnerability in the Microsoft Graphics Component can allow an authorized attacker to elevate privileges over the network. Connected Microsoft security updates and advisories indicate this issue is addressed in October 2025 Windows updates (KBs referenced in KB506...

CVE-2025-49753

Technical details for CVE-2025-49753 are not provided in the Connected documents; the Initial Description mentions a heap-based buffer overflow in RRAS but no vendor/product/version/impact details are given in the connected material.

CVE-2025-55680

CVE-2025-55680 concerns a TOCTOU race condition in the Windows Cloud Files Mini Filter Driver that can enable an authorized attacker to achieve local privilege escalation. The available connected docs confirm the affected component (Windows Cloud Files Mini Filter Driver) and the privilege impact...

CVE-2026-26156

CVE-2026-26156 is a Windows Hyper-V heap-based buffer overflow that enables local code execution. The connected sources corroborate the vulnerability in Windows Hyper-V and indicate it has been fixed by Microsoft in security updates (e.g., KBs and advisories referenced in the sources). The Red Ha...

CVE-2026-40410

Technical details (affected component, root cause, affected versions, exploit vectors or fixes) are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2026-47656

CVE-2026-47656 involves a vulnerability in Windows Boot Manager described as a protection mechanism failure that allows an authorized attacker to locally bypass a security feature. The associated CVSS 3.1 metrics indicate: Local attack vector, Low attack complexity, High privileges required, No u...