CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

CVE-2026-50366

CVE-2026-50366 describes a Denial of Service in Windows Active Directory Domain Services caused by a null pointer dereference. The vulnerability is exploitable over the network with no user interaction, requiring low privileges and network access from an authenticated attacker; the impact is deni...

CVE-2026-50419

CVE-2026-50419 is a Windows Kernel information-disclosure vulnerability that could allow an authorized local attacker to disclose sensitive data. The CVSS v3.1 base score is 3.3 (LOW) with LOCAL access and low complexity; no exploitation details are provided in the connected documents. Microsoft ...

CVE-2026-50493

CVE-2026-50493 is a DirectX Graphics Kernel elevation-of-privilege vulnerability in Windows caused by a use-after-free in the Windows Graphics Kernel/DirectX component. It enables a locally authenticated attacker to elevate privileges. The CVSS v3.1 vector (L/L/L/L/U/H/H) indicates local, low att...

CVE-2026-50690

CVE-2026-50690 is a Windows SMB information-disclosure vulnerability described as caused by the use of an uninitialized resource within Windows SMB that can allow an authorized local attacker to disclose information. The CVE is linked to Microsoft advisories and MSRC updates addressing the issue,...

CVE-2026-59138

CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...

CVE-2026-61353

CVE-2026-61353 describes a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege escalation . The vulnerability arises from a heap overflow in the Telephony Service component, leading to potential unauthorized system access....

CVE-2026-62782

CVE-2026-62782 is a Windows SMB Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The description and multiple sources (NVD, MSRC, CIRCL, ENISA/NCSC advisory references) confirm the affected compo...

CVE-2026-65662

CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...

CVE-2025-48815

CVE-2025-48815 affects Windows OS via a type confusion in the SSDP Service that could allow an authorized local attacker to elevate privileges. The description states local privilege escalation with high impact (CVSSv3.1: 7.8, HIGH). No explicit exploitation details or vendor/product versions are...

CVE-2026-20849

CVE-2026-20849 is a Windows Kerberos elevation of privilege vulnerability caused by reliance on untrusted inputs in a security decision. The description indicates an authorized attacker could elevate privileges over a network. The provided documents give a CVSS v3.1 base score of 7.5 (Network, Hi...

CVE-2026-20918

Technical details about CVE-2026-20918 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.

CVE-2026-26159

CVE-2026-26159 concerns the Windows Remote Desktop Licensing Service. The issue allows local attackers with low privileges and no user interaction to exploit elevation of privilege, impacting confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack ve...

CVE-2026-32163

CVE-2026-32163 corresponds to a race condition in Windows User Interface Core that can allow an authorized local attacker to elevate privileges. The confluence of connected advisories confirms this CVE is tracked as affecting Windows UI Core, with a CVSS v3.1 score of 7.8 (LOCAL, HIGH impact on c...

CVE-2026-40414

CVE-2026-40414 describes a null pointer dereference in the Windows TCP/IP stack that can cause a denial of service over an adjacent network. Affected software is Windows TCP/IP; root cause is a null pointer dereference. Impact is limited to availability (denial) with no confidentiality or integri...

CVE-2026-42979

CVE-2026-42979 describes a race condition in Windows Push Notifications due to improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The vulnerability is characterized by local access, high impact on confidentiality, integrity, and availab...

CVE-2026-44805

CVE-2026-44805: Use-after-free in Windows Network Controller (NC) Host Agent enables an authorized local attacker to cause denial of service. Affected component is the Windows Network Controller Host Agent; underlying cause is use-after-free. CVSSv3.1 base score 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I...

CVE-2026-45637

CVE-2026-45637 is a use-after-free vulnerability in Windows DWM Core Library that permits a locally authenticated attacker to achieve elevation of privileges. The underlying flaw is a use-after-free condition in the DWM Core Library, enabling an attacker with low privileges and no user interactio...

CVE-2026-50498

CVE-2026-50498 affects the Windows Universal Disk Format File System Driver (UDFS) and is an Elevation of Privilege vulnerability in the UDFS component. The root cause is described as a privilege/escalation condition within the Windows UDFS driver, leading to local privilege escalation with a hig...

CVE-2026-59137

Technical details about CVE-2026-59137 are not publicly provided in the supplied documents. No affected products, versions, or remediation are specified here. Monitor for updates from official sources.

CVE-2026-62729

CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...

CVE-2026-65681

CVE-2026-65681 : A null pointer dereference in the Windows iSCSI Target Service allows an unauthenticated, remote attacker to cause a denial of service over the network. The NVD entry states a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges requ...

CVE-2025-48804

CVE-2025-48804 : Windows BitLocker is affected by a security feature bypass through acceptance of extraneous untrusted data with trusted data, enabling a physical attacker to bypass protections. The connected Microsoft-related documents indicate that Microsoft released security updates addressing...

CVE-2025-48819

Technical details about CVE-2025-48819 are not publicly provided in the supplied documents; no product/version/root-cause/impact information is included beyond the basic description. Monitor for official updates.

CVE-2025-49683

Technical details about CVE-2025-49683 (VHDX integer overflow) are not provided in the connected documents. Monitor for updates.

CVE-2025-49732

Technical details about CVE-2025-49732 are not provided in the connected documents. Public information appears limited to the CVE entry and general Microsoft updates; monitor for official advisories for affected products, impact, and fix timing.

CVE-2026-26168

CVE-2026-26168 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows an authorized local attacker to elevate privileges. Publicly referenced Red Hat and Dutch/NCSC/CIRCL sources confirm the Windows driver component and local privilege impact; exploitation sta...

CVE-2026-32156

CVE-2026-32156 is a use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host (upnp.dll) that allows a local, unauthorized attacker to execute code on the system. The connected sources confirm the issue affects Windows UPnP Device Host and list it among UPnP-related C...

CVE-2026-34336

Technical details (affected product/version, root cause, exploit information, or patch specifics) are not provided in the supplied documents. Monitor for updates as public details may be released separately.

CVE-2026-42975

CVE-2026-42975 affects the Windows Bluetooth Port Driver and is caused by a heap-based buffer overflow. This can allow an unauthenticated attacker to execute code on a target system over an adjacent network. The documented impact is high (remote code execution with full device compromise) and the...

CVE-2026-42984

CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...

CVE-2026-45603

The vulnerability CVE-2026-45603 affects Windows’ Ancillary Function Driver for WinSock (AFD). The issue is a use-after-free in the WinSock-related driver, leading to local privilege escalation for an authorized attacker. The CVSS3.1 assessment shows HIGH impact with LOCAL access, HIGH confidenti...

CVE-2026-50444

CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...

CVE-2026-50471

CVE-2026-50471 is a heap-based buffer overflow in Windows NTFS that could allow a local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components as described in multiple sources (NVD/NCSC/CIRCL) and is being addressed by Microsoft with published updates (e.g., KB arti...

CVE-2026-56175

CVE-2026-56175 describes a heap-based buffer overflow in Windows NTFS that allows an authorized, local attacker to elevate privileges. Connected sources (Microsoft MSRC update, NVD, NTFS/CIRCL sightings) confirm the vulnerability is in Windows NTFS, with local-privilege-escalation potential and a...

CVE-2026-70344

CVE-2026-70344 originates from a stack-based buffer overflow in Windows Installer. The vulnerability could allow an authorized attacker to perform local privilege escalation on affected systems. The CVSS 3.1 vector (L/L/P:L/U:N/S:U/C:H/I:H/A:H) indicates local attack vector, low attack complexity...

CVE-2025-49659

Technical details for CVE-2025-49659 are not present in the provided connected documents. Public information about affected products, root cause, exploit status, and fixes is not available here; monitor for updates from official advisories.

CVE-2025-49663

Technical details for CVE-2025-49663 are not provided in the connected documents; the initial description mentions RRAS heap overflow but lacks concrete product/version/impact details—monitor for updates.

CVE-2025-49671

CVE-2025-49671 affects Windows Routing and Remote Access Service (RRAS). The RRAS entry shows an issue enabling an unauthorized network attacker to access sensitive data (Confidentiality impact HIGH). CVSSv3.1 metrics (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) yield base score 6.5 (MEDIUM). The Connec...

CVE-2025-49742

Technical details about CVE-2025-49742 are not provided in the supplied documents. No information on affected products, root cause, impact, or fixes is available here; monitor for updates.

CVE-2025-55224

CVE-2025-55224 is described as a race condition in Windows Win32K GRFX enabling local code execution by an authenticated attacker. Connected sources reference the CVE in the context of Windows graphics/Hyper-V (RCE), but the provided documents do not include concrete product/version mappings, roo...

CVE-2025-64679

CVE-2025-64679 is a heap-based buffer overflow in Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. The NCSC advisory and CVE listings confirm this affects Windows DWM Core Library and is tracked under CVE-2025-64679 with a high-severity impact (local,...

CVE-2026-20840

CVE-2026-20840 is a Windows NTFS heap-based buffer overflow that enables local code execution by an authorized attacker. The vulnerability affects the Windows NTFS component and is rated with a CVSS v3.1 base score of 7.8 (High) for local, low-attack‑complexity, no user interaction, with high con...

CVE-2026-25190

CVE-2026-25190 is a Windows GDI vulnerability (Untrusted search path) that enables local code execution. The CVE is documented across NVD/NCSC/EUVD with a base CVSS v3.1 score of 7.8 (High) and a local attack vector requiring user interaction. Microsoft has released fixes via March 2026 updates (...

CVE-2026-27920

CVE-2026-27920 is a Windows vulnerability in the UPnP Device Host that enables a local privilege escalation . The entry indicates a local attack vector with low required privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 base s...

CVE-2026-47289

CVE-2026-47289 is a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution over a network. The vulnerability is exploitable remotely (attack vector: NETWORK) with low complexity and requires user interaction, yielding a high impact on confidentiality, integrity...

CVE-2026-50310

CVE-2026-50310 describes an integer overflow/wraparound in Windows Devices Human Interface which allows an authorized local attacker to disclose information. Affected component is the Windows Devices Human Interface; root cause is an overflow condition that can leak data locally. Microsoft has re...

CVE-2026-58619

CVE-2026-58619 is a Windows Sensor Data Service vulnerability described as a use-after-free that enables an authorized attacker to locally elevate privileges. The vulnerability is reported with CVSS 3.1: LOCAL attack vector, HIGH impact (C, I, A), and low privileges required with no user interact...

CVE-2026-62714

CVE-2026-62714 describes an integer underflow (wrap/wraparound) in Windows DHCP Server that allows an unauthorized attacker on an adjacent network to disclose information. The NVD entry confirms an ADJACENT network attack vector with LOW complexity, NONE privileges, and NONE user interaction, and...

CVE-2026-62743

CVE-2026-62743 describes an out-of-bounds read in Windows Win32K that can lead to local information disclosure by an authorized attacker. The vulnerability affects the Win32K component and is exploitable with low privileges and no user interaction, with a local attack vector. The CVSS3.1 base sco...