CVE-2026-25169

Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.

CVE-2026-34338

CVE-2026-34338 : Use-after-free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. The publicly provided documents confirm the vulnerability and impact but do not reveal affected Windows versions, exact internal component, or remediation details. The NVD ent...

CVE-2025-50161

CVE-2025-50161 is a heap-based buffer overflow affecting Windows Win32K - GRFX. The vulnerability allows an authorized attacker to achieve local privilege escalation. Exploitation requires user interaction and low privileges before escalation. Microsoft has released security updates addressing vu...

CVE-2025-54092

Technical details for CVE-2025-54092 are not publicly provided in the supplied documents. Connected KB/MSFT resources reference related issues but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.

CVE-2025-54093

CVE-2025-54093 is described as a time-of-check time-of-use (TOCTOU) race in the Windows TCP/IP stack that can enable a locally authenticated attacker to elevate privileges. Connected sources reference this CVE in the context of Windows TCP/IP and note it as a local-privilege-escalation issue, wit...

CVE-2025-54094

CVE-2025-54094 is a local privilege escalation in the Windows Defender Firewall Service caused by a type confusion vulnerability. The connected documents confirm the affected component as Windows Defender Firewall Service and the impact as obtaining elevated privileges on the local machine. The s...

CVE-2025-54113

Summary: CVE-2025-54113 affects Windows Routing and Remote Access Service (RRAS) and is described as a heap-based buffer overflow that allows a remote attacker to execute code over the network. The NCSC advisory lists CVE-2025-54113 with a CVSS v3.1 base score of 7.5 and impact of executing code,...

CVE-2025-54116

CVE-2025-54116 affects Windows MultiPoint Services with Improper access control that enables local privilege escalation by an authorized user. CVSS 3.1 base score 7.3 (Local, Privilege Required Low, User Interaction Required, High Confidentiality/Integrity/Availability impact). The Connected docu...

CVE-2025-55678

CVE-2025-55678 : A use-after-free in Windows DirectX enables an authenticated local attacker to achieve elevated privileges. The connected EUVD entry confirms this description. No concrete affected builds, exploit details, or patch/version information are provided in the supplied documents. Remed...

CVE-2025-58726

CVE-2025-58726 affects Windows SMB Server with improper access control that enables an authenticated network attacker to elevate privileges. The issue is network-exploitable, requires low privileges, and has high impact on confidentiality, integrity, and availability. Microsoft and OS security up...

CVE-2025-59193

CVE-2025-59193 describes a race condition in Windows Management Services (a Windows component) where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The description in the CVE notes local, privilege-escalation impact due to improper synchronizatio...

CVE-2025-59200

CVE-2025-59200 describes a race-condition vulnerability in the Data Sharing Service Client where concurrent access to a shared resource allows an unauthorized local attacker to spoof locally. The CVE entry states a base CVSS v3.1 score of 7.7 ( HIGH ), with LOCAL attack vector, LOW confidentialit...

CVE-2025-59260

CVE-2025-59260 is an information-disclosure vulnerability in the Microsoft Failover Cluster Virtual Driver that can expose sensitive data to a locally authenticated attacker. The CVSS 3.1 vector indicates a local attack with low complexity and low privileges required, and a high confidentiality i...

CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

CVE-2026-20921

CVE-2026-20921 is a Windows SMB Server vulnerability described as a race condition in a shared resource that could allow an authenticated attacker to elevate privileges over the network. Connected sources indicate this CVE is listed under Windows SMB Server with an exploitability/impact profile (...

CVE-2026-21255

CVE-2026-21255 is a Windows Hyper-V security feature bypass vulnerability described as improper access control that enables an authorized local attacker to bypass a security feature. Publicly available sources identify Hyper-V as the affected component, with the root cause tied to access-control ...

CVE-2026-21525

CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...

CVE-2026-25189

The CVE-2026-25189 entry concerns a Use-after-Free in Windows DWM Core Library that allows an authorized attacker to locally elevate privileges. Affected component is Windows DWM Core Library; root cause is a use-after-free condition leading to privilege escalation. Microsoft and related advisori...

CVE-2026-26152

CVE-2026-26152 pertains to Microsoft Cryptographic Services with a local elevation-of-privilege vulnerability. The CVSS 3.1 vector indicates local access, high impact on confidentiality, integrity, and availability, with user interaction not required. PrivilegesRequired is LOW, AttackComplexity i...

CVE-2026-32077

CVE-2026-32077 is a Windows UPnP Device Host elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH) with a LOCAL attack vector, LOW attack complexity, and required LOW privileges; no user interaction is needed. Affects confidentiality, integrity, and availability (all HIGH i...

CVE-2026-45599

The CVE-2026-45599 entry describes a use-after-free in Windows’ Universal Plug and Play component (upnp.dll) that enables a remote attacker to execute code over the network via the UPnP Device Host. The vulnerability is rated CVSSv3.1: 8.1 (HIGH) with Network attack vector, no privileges required...

CVE-2025-48813

Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.

CVE-2025-50175

CVE-2025-50175 is a Windows Digital Media use-after-free that allows a local, authorized attacker to elevate privileges. The provided documents confirm the vulnerability name and impact (local elevation of privilege) and indicate Microsoft Windows components are involved, but they do not supply c...

CVE-2025-53152

CVE-2025-53152 is a local-use-after-free vulnerability in the Desktop Window Manager (DWM) of Windows that enables an authenticated attacker to execute code locally. The CVSS v3.1 score indicates local access with low privileges and no user interaction, but high impact to confidentiality, integri...

CVE-2025-53716

CVE-2025-53716 is a Denial-of-Service vulnerability due to a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS). The CVE description states an authorized attacker can trigger a network-based DoS without user interaction, with attack vector NETWORK and impact Av...

CVE-2025-53800

CVE-2025-53800 is a local privilege escalation in the Microsoft Graphics Component. The Initial Description notes privilege elevation for an authorized attacker, but does not provide technical details on the vulnerable subcomponent, root cause, affected versions, exploit vectors, or exact impact ...

CVE-2025-55335

CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...

CVE-2025-58717

Technical details (affected product/component/version/root cause/mitigation) for CVE-2025-58717 are not disclosed in the provided connected documents. Monitor official advisories (e.g., MSRC/KB updates) for remediation and version-specific guidance.

CVE-2025-58720

CVE-2025-58720 (Windows Cryptographic Services) has concrete details in connected docs. The vulnerability arises from using a cryptographic primitive with a risky implementation in Windows Cryptographic Services, enabling an authenticated local attacker to disclose information. The vulnerability ...

CVE-2025-58733

CVE-2025-58733 corresponds to a use-after-free in Inbox COM Objects on Windows that enables local code execution. Connected sources confirm Inbox COM Objects as the vulnerable component and describe the impact as arbitrary code execution by a local attacker. Public advisories from Microsoft and C...

CVE-2025-59188

CVE-2025-59188 is described as an information-disclosure vulnerability in the Windows Failover Cluster that could allow an authorized local attacker to disclose sensitive information. The available connected MS advisories and vulnerability lists indicate this affects Windows Failover Cluster and ...

CVE-2025-59507

CVE-2025-59507 affects Windows Speech and is described in connected materials as a race-condition‑driven vulnerability in a Windows Speech component that enables local privilege escalation for an authorized user. The provided sources note an elevated-privileges impact but do not specify the exact...

CVE-2025-60703

Technical details about CVE-2025-60703 are not provided in the initial or connected documents. Monitor for updates as more specifics (affected product/version, root cause, mitigations) may be published.

CVE-2026-20810

CVE-2026-20810 affects the Windows Ancillary Function Driver for WinSock. The vulnerability allows an authorized local attacker to elevate privileges due to a memory allocation issue that is not on the heap. The CVE entry shows a local attack vector with high impact (confidentiality, integrity, a...

CVE-2026-20861

CVE-2026-20861 describes a race condition in Windows Management Services that allows an authorized, local attacker to elevate privileges. The connected documents corroborate that this CVE is associated with Windows Management Services and appears in Microsoft‑affecting security updates released J...

CVE-2026-20875

CVE-2026-20875 is a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) that enables a network-based denial of service. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (Network, Low complexity, No privileges, No user interaction; impact: Avail...

CVE-2026-27912

CVE-2026-27912 is a Windows Kerberos elevation-of-privileges vulnerability described in connected sources as an improper authorization issue that allows an authorized attacker to obtain elevated entitlements over an adjacent network. The vulnerability is categorized under Windows Kerberos with an...

CVE-2026-34340

CVE-2026-34340 : Use-after-free in the Windows Projected File System can allow an authorized local attacker to elevate privileges. The provided documents identify the affected component as Windows Projected File System and state the root cause as a use-after-free, with a CVSS v3.1 base score of 7...

CVE-2026-41108

CVE-2026-41108 is a heap-based buffer overflow in the Microsoft Windows DNS Client that allows an authorized, local attacker to perform privilege escalation. Affected component: Windows DNS client functionality (DNS resolution path); root cause: heap-based overflow leading to elevation of privile...

CVE-2026-42973

Technical details (affected software, conditions, exploitability, and remediation) are not publicly available in the provided documents; monitor for updates.

CVE-2025-50152

CVE-2025-50152 is a Windows Kernel vulnerability (Out-of-bounds read) that could enable an authorized local attacker to elevate privileges. The initial record lists the CVE with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL attack vector/low complexity, with no exploitation details. Connected do...

CVE-2025-50167

CVE-2025-50167 involves a race condition in Windows Hyper-V due to improper synchronization on a shared resource, enabling an authorized local attacker to elevate privileges. The description in the Connected Documents confirms the vulnerability impact as local privilege escalation within Hyper‑V....

CVE-2025-53131

CVE-2025-53131 is a heap-based buffer overflow in Windows Media that could allow an unauthenticated attacker to execute code over the network. The Connected documents show Windows security updates in August 2025 (and related servicing stack updates) addressing Windows Media and other components, ...

CVE-2025-53141

CVE-2025-53141 refers to a null pointer dereference in the Windows Ancillary Function Driver for WinSock that can enable local privilege escalation for an authenticated user. The connected Windows-ecosystem data identifies this CVE as affecting the WinSock ancillary driver with a high base severi...

CVE-2025-54091

Technical details for CVE-2025-54091 are not publicly provided in the connected documents. The initial description notes a local privilege elevation via Hyper-V, but no specific root cause, affected products, or fixes are given here. Monitor for updates.

CVE-2025-54895

CVE-2025-54895 : Integer overflow or wraparound in Windows SPNEGO Extended Negotiation can let an authorized, locally authenticated attacker elevate privileges. The connected documents confirm the vulnerability in the Windows SPNEGO Extended Negotiation path and indicate the impact as local privi...

CVE-2025-54919

CVE-2025-54919 is linked to Windows Win32K GRFX and is described as a race condition in a shared resource that could allow an authorized, local attacker to execute code. The Connected documents confirm the CVE within Windows Win32K GRFX but do not provide concrete exploit details, affected versio...

CVE-2025-55692

Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.

CVE-2025-58730

The CVE-2025-58730 entry is corroborated by connected sources as a local code-execution via a use-after-free in Inbox COM Objects. The KB/MSKB documents listed do not provide vendor/version specifics or a public fix; public details in EUVD-2025-34313/ NCSC-2025-0310 reiterate the issue abstractly...

CVE-2025-59214

CVE-2025-59214 is a Microsoft Windows File Explorer spoofing and information-disclosure vulnerability. Public advisories describe exposure of sensitive information to unauthorized actors, enabling spoofing over a network via Windows File Explorer. Multiple connected sources confirm that Windows F...