Lucene search
+L
MicrosoftWindows Server 2019*

2038 matches found

CVE
CVE
added 2026/03/10 5:4 p.m.41 views

CVE-2026-25169

Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.

6.2CVSS5.8AI score0.00474EPSS
Save
CVE
CVE
added 2026/05/12 4:59 p.m.41 views

CVE-2026-34338

CVE-2026-34338 : Use-after-free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. The publicly provided documents confirm the vulnerability and impact but do not reveal affected Windows versions, exact internal component, or remediation details. The NVD ent...

7.8CVSS5.8AI score0.00249EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.40 views

CVE-2025-50161

CVE-2025-50161 is a heap-based buffer overflow affecting Windows Win32K - GRFX. The vulnerability allows an authorized attacker to achieve local privilege escalation. Exploitation requires user interaction and low privileges before escalation. Microsoft has released security updates addressing vu...

7.3CVSS7.6AI score0.00577EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.40 views

CVE-2025-54092

Technical details for CVE-2025-54092 are not publicly provided in the supplied documents. Connected KB/MSFT resources reference related issues but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.

7.8CVSS6.5AI score0.00314EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.40 views

CVE-2025-54093

CVE-2025-54093 is described as a time-of-check time-of-use (TOCTOU) race in the Windows TCP/IP stack that can enable a locally authenticated attacker to elevate privileges. Connected sources reference this CVE in the context of Windows TCP/IP and note it as a local-privilege-escalation issue, wit...

7CVSS6.3AI score0.00349EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.40 views

CVE-2025-54094

CVE-2025-54094 is a local privilege escalation in the Windows Defender Firewall Service caused by a type confusion vulnerability. The connected documents confirm the affected component as Windows Defender Firewall Service and the impact as obtaining elevated privileges on the local machine. The s...

6.7CVSS6.4AI score0.00435EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.40 views

CVE-2025-54113

Summary: CVE-2025-54113 affects Windows Routing and Remote Access Service (RRAS) and is described as a heap-based buffer overflow that allows a remote attacker to execute code over the network. The NCSC advisory lists CVE-2025-54113 with a CVSS v3.1 base score of 7.5 and impact of executing code,...

8.8CVSS7.3AI score0.00843EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.40 views

CVE-2025-54116

CVE-2025-54116 affects Windows MultiPoint Services with Improper access control that enables local privilege escalation by an authorized user. CVSS 3.1 base score 7.3 (Local, Privilege Required Low, User Interaction Required, High Confidentiality/Integrity/Availability impact). The Connected docu...

7.3CVSS6.4AI score0.00489EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.40 views

CVE-2025-55678

CVE-2025-55678 : A use-after-free in Windows DirectX enables an authenticated local attacker to achieve elevated privileges. The connected EUVD entry confirms this description. No concrete affected builds, exploit details, or patch/version information are provided in the supplied documents. Remed...

7CVSS6.7AI score0.00273EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.40 views

CVE-2025-58726

CVE-2025-58726 affects Windows SMB Server with improper access control that enables an authenticated network attacker to elevate privileges. The issue is network-exploitable, requires low privileges, and has high impact on confidentiality, integrity, and availability. Microsoft and OS security up...

7.5CVSS6.4AI score0.00978EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.40 views

CVE-2025-59193

CVE-2025-59193 describes a race condition in Windows Management Services (a Windows component) where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The description in the CVE notes local, privilege-escalation impact due to improper synchronizatio...

7CVSS6.6AI score0.00178EPSS
Save
CVE
CVE
added 2025/10/14 5:0 p.m.40 views

CVE-2025-59200

CVE-2025-59200 describes a race-condition vulnerability in the Data Sharing Service Client where concurrent access to a shared resource allows an unauthorized local attacker to spoof locally. The CVE entry states a base CVSS v3.1 score of 7.7 ( HIGH ), with LOCAL attack vector, LOW confidentialit...

7.7CVSS6.6AI score0.00751EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.40 views

CVE-2025-59260

CVE-2025-59260 is an information-disclosure vulnerability in the Microsoft Failover Cluster Virtual Driver that can expose sensitive data to a locally authenticated attacker. The CVSS 3.1 vector indicates a local attack with low complexity and low privileges required, and a high confidentiality i...

5.5CVSS6AI score0.00376EPSS
Save
CVE
CVE
added 2025/12/09 5:56 p.m.40 views

CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

7.3CVSS6.7AI score0.00533EPSS
Save
CVE
CVE
added 2026/01/13 5:56 p.m.40 views

CVE-2026-20921

CVE-2026-20921 is a Windows SMB Server vulnerability described as a race condition in a shared resource that could allow an authenticated attacker to elevate privileges over the network. Connected sources indicate this CVE is listed under Windows SMB Server with an exploitability/impact profile (...

7.5CVSS6.6AI score0.01154EPSS
Save
CVE
CVE
added 2026/02/10 5:51 p.m.40 views

CVE-2026-21255

CVE-2026-21255 is a Windows Hyper-V security feature bypass vulnerability described as improper access control that enables an authorized local attacker to bypass a security feature. Publicly available sources identify Hyper-V as the affected component, with the root cause tied to access-control ...

8.8CVSS5.5AI score0.00356EPSS
Save
CVE
CVE
added 2026/02/10 5:51 p.m.40 views

CVE-2026-21525

CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...

6.2CVSS5.5AI score0.04956EPSS
SaveIn wild
CVE
CVE
added 2026/03/10 5:5 p.m.40 views

CVE-2026-25189

The CVE-2026-25189 entry concerns a Use-after-Free in Windows DWM Core Library that allows an authorized attacker to locally elevate privileges. Affected component is Windows DWM Core Library; root cause is a use-after-free condition leading to privilege escalation. Microsoft and related advisori...

7.8CVSS5.8AI score0.00334EPSS
Save
CVE
CVE
added 2026/04/14 4:57 p.m.40 views

CVE-2026-26152

CVE-2026-26152 pertains to Microsoft Cryptographic Services with a local elevation-of-privilege vulnerability. The CVSS 3.1 vector indicates local access, high impact on confidentiality, integrity, and availability, with user interaction not required. PrivilegesRequired is LOW, AttackComplexity i...

7CVSS5.7AI score0.00234EPSS
Save
CVE
CVE
added 2026/04/14 4:58 p.m.40 views

CVE-2026-32077

CVE-2026-32077 is a Windows UPnP Device Host elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH) with a LOCAL attack vector, LOW attack complexity, and required LOW privileges; no user interaction is needed. Affects confidentiality, integrity, and availability (all HIGH i...

7.8CVSS5.7AI score0.00321EPSS
Save
CVE
CVE
added 2026/06/09 5:5 p.m.40 views

CVE-2026-45599

The CVE-2026-45599 entry describes a use-after-free in Windows’ Universal Plug and Play component (upnp.dll) that enables a remote attacker to execute code over the network via the UPnP Device Host. The vulnerability is rated CVSSv3.1: 8.1 (HIGH) with Network attack vector, no privileges required...

8.1CVSS5.7AI score0.0052EPSS
Save
CVE
CVE
added 2025/10/14 5:0 p.m.39 views

CVE-2025-48813

Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.

6.3CVSS6.4AI score0.00234EPSS
Save
CVE
CVE
added 2025/10/14 5:0 p.m.39 views

CVE-2025-50175

CVE-2025-50175 is a Windows Digital Media use-after-free that allows a local, authorized attacker to elevate privileges. The provided documents confirm the vulnerability name and impact (local elevation of privilege) and indicate Microsoft Windows components are involved, but they do not supply c...

7.8CVSS6.7AI score0.00396EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.39 views

CVE-2025-53152

CVE-2025-53152 is a local-use-after-free vulnerability in the Desktop Window Manager (DWM) of Windows that enables an authenticated attacker to execute code locally. The CVSS v3.1 score indicates local access with low privileges and no user interaction, but high impact to confidentiality, integri...

7.8CVSS7.9AI score0.00439EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.39 views

CVE-2025-53716

CVE-2025-53716 is a Denial-of-Service vulnerability due to a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS). The CVE description states an authorized attacker can trigger a network-based DoS without user interaction, with attack vector NETWORK and impact Av...

6.5CVSS7AI score0.01397EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.39 views

CVE-2025-53800

CVE-2025-53800 is a local privilege escalation in the Microsoft Graphics Component. The Initial Description notes privilege elevation for an authorized attacker, but does not provide technical details on the vulnerable subcomponent, root cause, affected versions, exploit vectors, or exact impact ...

7.8CVSS6.3AI score0.00457EPSS
Save
CVE
CVE
added 2025/10/14 5:0 p.m.39 views

CVE-2025-55335

CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...

7.4CVSS6.7AI score0.00246EPSS
Save
CVE
CVE
added 2025/10/14 5:0 p.m.39 views

CVE-2025-58717

Technical details (affected product/component/version/root cause/mitigation) for CVE-2025-58717 are not disclosed in the provided connected documents. Monitor official advisories (e.g., MSRC/KB updates) for remediation and version-specific guidance.

6.5CVSS6.1AI score0.00909EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.39 views

CVE-2025-58720

CVE-2025-58720 (Windows Cryptographic Services) has concrete details in connected docs. The vulnerability arises from using a cryptographic primitive with a risky implementation in Windows Cryptographic Services, enabling an authenticated local attacker to disclose information. The vulnerability ...

7.8CVSS6.1AI score0.00193EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.39 views

CVE-2025-58733

CVE-2025-58733 corresponds to a use-after-free in Inbox COM Objects on Windows that enables local code execution. Connected sources confirm Inbox COM Objects as the vulnerable component and describe the impact as arbitrary code execution by a local attacker. Public advisories from Microsoft and C...

7CVSS7.2AI score0.00327EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.39 views

CVE-2025-59188

CVE-2025-59188 is described as an information-disclosure vulnerability in the Windows Failover Cluster that could allow an authorized local attacker to disclose sensitive information. The available connected MS advisories and vulnerability lists indicate this affects Windows Failover Cluster and ...

5.5CVSS6.1AI score0.00404EPSS
Save
CVE
CVE
added 2025/11/11 5:59 p.m.39 views

CVE-2025-59507

CVE-2025-59507 affects Windows Speech and is described in connected materials as a race-condition‑driven vulnerability in a Windows Speech component that enables local privilege escalation for an authorized user. The provided sources note an elevated-privileges impact but do not specify the exact...

7CVSS5.4AI score0.00241EPSS
Save
CVE
CVE
added 2025/11/11 5:59 p.m.39 views

CVE-2025-60703

Technical details about CVE-2025-60703 are not provided in the initial or connected documents. Monitor for updates as more specifics (affected product/version, root cause, mitigations) may be published.

7.8CVSS5.3AI score0.00405EPSS
Save
CVE
CVE
added 2026/01/13 5:56 p.m.39 views

CVE-2026-20810

CVE-2026-20810 affects the Windows Ancillary Function Driver for WinSock. The vulnerability allows an authorized local attacker to elevate privileges due to a memory allocation issue that is not on the heap. The CVE entry shows a local attack vector with high impact (confidentiality, integrity, a...

7.8CVSS6.5AI score0.00475EPSS
Save
CVE
CVE
added 2026/01/13 5:56 p.m.39 views

CVE-2026-20861

CVE-2026-20861 describes a race condition in Windows Management Services that allows an authorized, local attacker to elevate privileges. The connected documents corroborate that this CVE is associated with Windows Management Services and appears in Microsoft‑affecting security updates released J...

7.8CVSS6.6AI score0.00288EPSS
Save
CVE
CVE
added 2026/01/13 5:56 p.m.39 views

CVE-2026-20875

CVE-2026-20875 is a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) that enables a network-based denial of service. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (Network, Low complexity, No privileges, No user interaction; impact: Avail...

7.5CVSS6.4AI score0.01532EPSS
Save
CVE
CVE
added 2026/04/14 4:58 p.m.39 views

CVE-2026-27912

CVE-2026-27912 is a Windows Kerberos elevation-of-privileges vulnerability described in connected sources as an improper authorization issue that allows an authorized attacker to obtain elevated entitlements over an adjacent network. The vulnerability is categorized under Windows Kerberos with an...

8CVSS5.8AI score0.00242EPSS
Save
CVE
CVE
added 2026/05/12 4:59 p.m.39 views

CVE-2026-34340

CVE-2026-34340 : Use-after-free in the Windows Projected File System can allow an authorized local attacker to elevate privileges. The provided documents identify the affected component as Windows Projected File System and state the root cause as a use-after-free, with a CVSS v3.1 base score of 7...

7CVSS5.8AI score0.00207EPSS
Save
CVE
CVE
added 2026/06/09 5:4 p.m.39 views

CVE-2026-41108

CVE-2026-41108 is a heap-based buffer overflow in the Microsoft Windows DNS Client that allows an authorized, local attacker to perform privilege escalation. Affected component: Windows DNS client functionality (DNS resolution path); root cause: heap-based overflow leading to elevation of privile...

7CVSS5.8AI score0.00274EPSS
Save
CVE
CVE
added 2026/06/09 5:6 p.m.39 views

CVE-2026-42973

Technical details (affected software, conditions, exploitability, and remediation) are not publicly available in the provided documents; monitor for updates.

5.5CVSS6AI score0.00404EPSS
Save
CVE
CVE
added 2025/10/14 5:0 p.m.38 views

CVE-2025-50152

CVE-2025-50152 is a Windows Kernel vulnerability (Out-of-bounds read) that could enable an authorized local attacker to elevate privileges. The initial record lists the CVE with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL attack vector/low complexity, with no exploitation details. Connected do...

7.8CVSS6.4AI score0.00396EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.38 views

CVE-2025-50167

CVE-2025-50167 involves a race condition in Windows Hyper-V due to improper synchronization on a shared resource, enabling an authorized local attacker to elevate privileges. The description in the Connected Documents confirms the vulnerability impact as local privilege escalation within Hyper‑V....

7CVSS7.2AI score0.0038EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.38 views

CVE-2025-53131

CVE-2025-53131 is a heap-based buffer overflow in Windows Media that could allow an unauthenticated attacker to execute code over the network. The Connected documents show Windows security updates in August 2025 (and related servicing stack updates) addressing Windows Media and other components, ...

8.8CVSS8AI score0.00904EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.38 views

CVE-2025-53141

CVE-2025-53141 refers to a null pointer dereference in the Windows Ancillary Function Driver for WinSock that can enable local privilege escalation for an authenticated user. The connected Windows-ecosystem data identifies this CVE as affecting the WinSock ancillary driver with a high base severi...

7.8CVSS7.1AI score0.0043EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.38 views

CVE-2025-54091

Technical details for CVE-2025-54091 are not publicly provided in the connected documents. The initial description notes a local privilege elevation via Hyper-V, but no specific root cause, affected products, or fixes are given here. Monitor for updates.

7.8CVSS6.7AI score0.00417EPSS
Save
CVE
CVE
added 2025/09/09 5:0 p.m.38 views

CVE-2025-54895

CVE-2025-54895 : Integer overflow or wraparound in Windows SPNEGO Extended Negotiation can let an authorized, locally authenticated attacker elevate privileges. The connected documents confirm the vulnerability in the Windows SPNEGO Extended Negotiation path and indicate the impact as local privi...

7.8CVSS6.7AI score0.00263EPSS
Save
CVE
CVE
added 2025/09/09 5:1 p.m.38 views

CVE-2025-54919

CVE-2025-54919 is linked to Windows Win32K GRFX and is described as a race condition in a shared resource that could allow an authorized, local attacker to execute code. The Connected documents confirm the CVE within Windows Win32K GRFX but do not provide concrete exploit details, affected versio...

7.5CVSS7.1AI score0.00357EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.38 views

CVE-2025-55692

Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.

7.8CVSS6.5AI score0.03158EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.38 views

CVE-2025-58730

The CVE-2025-58730 entry is corroborated by connected sources as a local code-execution via a use-after-free in Inbox COM Objects. The KB/MSKB documents listed do not provide vendor/version specifics or a public fix; public details in EUVD-2025-34313/ NCSC-2025-0310 reiterate the issue abstractly...

7CVSS7.2AI score0.00327EPSS
Save
CVE
CVE
added 2025/10/14 5:1 p.m.38 views

CVE-2025-59214

CVE-2025-59214 is a Microsoft Windows File Explorer spoofing and information-disclosure vulnerability. Public advisories describe exposure of sensitive information to unauthorized actors, enabling spoofing over a network via Windows File Explorer. Multiple connected sources confirm that Windows F...

6.5CVSS6.1AI score0.01791EPSS
Save
Total number of security vulnerabilities2038