CVE-2026-26156

CVE-2026-26156 is a Windows Hyper-V heap-based buffer overflow that enables local code execution. The connected sources corroborate the vulnerability in Windows Hyper-V and indicate it has been fixed by Microsoft in security updates (e.g., KBs and advisories referenced in the sources). The Red Ha...

CVE-2026-26184

CVE-2026-26184 is a Buffer over-read in the Windows Projected File System that can enable local privilege elevation for an authenticated user. Connected sources confirm it is tracked under Windows Projected File System and that Microsoft has released security updates to fix vulnerabilities in Win...

CVE-2026-42979

CVE-2026-42979 describes a race condition in Windows Push Notifications due to improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The vulnerability is characterized by local access, high impact on confidentiality, integrity, and availab...

CVE-2026-44806

CVE-2026-44806 : Windows Cryptographic Services vulnerability causing denial of service over the network due to missing release of memory after its effective lifetime. Affected component: Windows Cryptographic Services. Root cause described as missing memory release, leading to potential DoS. Rem...

CVE-2026-45599

The CVE-2026-45599 entry describes a use-after-free in Windows’ Universal Plug and Play component (upnp.dll) that enables a remote attacker to execute code over the network via the UPnP Device Host. The vulnerability is rated CVSSv3.1: 8.1 (HIGH) with Network attack vector, no privileges required...

CVE-2026-45603

The vulnerability CVE-2026-45603 affects Windows’ Ancillary Function Driver for WinSock (AFD). The issue is a use-after-free in the WinSock-related driver, leading to local privilege escalation for an authorized attacker. The CVSS3.1 assessment shows HIGH impact with LOCAL access, HIGH confidenti...

CVE-2026-45642

Microsoft Azure Attestation service and Device Health Attestation Service are affected by improper input validation, allowing an authorized attacker to perform spoofing with a physical attack. CVSS 3.1, base score 3.9 (LOW); attack vector Physical, privileges required High, integrity impact High,...

CVE-2026-50357

CVE-2026-50357 affects Windows Resilient File System (ReFS). The issue is a numeric truncation error in ReFS that, per the provided documents, can enable an authorized attacker to execute code locally. The MSRC/MSVCN details list this as an elevation of privileges / local arbitrary code execution...

CVE-2026-50439

CVE-2026-50439 affects Microsoft Message Queuing Queue Manager. Description and connected records confirm a use-after-free vulnerability that allows an unauthenticated attacker to execute code remotely over a network. Impact is described as remote code execution with high-severity CVSS in public ...

CVE-2026-56644

CVE-2026-56644 is a Windows Kernel elevation-of-privilege vulnerability described as a use-after-free in the DirectX Graphics Kernel. Exploitation would allow a local, authenticated attacker to escalate privileges. Public references indicate Microsoft has released updates (MSRC pages and related ...

CVE-2026-70304

Windows DNS contains a heap-based buffer overflow exploitable by an authorized local attacker to elevate privileges. NVD rates it HIGH (7.8, PR:L); Microsoft's CVSS rates MEDIUM (6.7, PR:H). No in-the-wild exploitation reported. Patch via August 2026 Microsoft security updates (KB5121000, KB51202...

CVE-2025-29956

Technical details (affected components, vulnerable versions, exploitability, and remediation) are not provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for CVE-2025-29956.

CVE-2025-32721

CVE-2025-32721 is a Windows Recovery Driver privilege-escalation flaw caused by improper link resolution before file access. Reported CVSS v3.1 base score 7.3 (High) with local, low-attack-skill requirements, user interaction required, and high impact on confidentiality, integrity, and availabili...

CVE-2025-49667

Technical details about CVE-2025-49667 are not publicly provided in the supplied connected and initial documents. Monitor for updates from official advisories; current materials only indicate a local privilege escalation via Win32K ICOMP without specifics.

CVE-2025-54107

CVE-2025-54107 involves the Windows MapUrlToZone component with improper resolution of path equivalence, enabling circumvention of a security feature over a network. The entry lists CVSS 3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N (base 4.3, MEDIUM) and notes a network-exposed vector with no privileg...

CVE-2026-20926

CVE-2026-20926 describes a race condition in the Windows SMB Server that allows an authorized network attacker to elevate privileges. The vulnerability affects Windows SMB Server components and is tied to concurrent execution on a shared resource with improper synchronization. Mitigation is via M...

CVE-2026-20936

CVE-2026-20936 is an information-disclosure vulnerability in Windows NDIS (network data path). The issue is an out-of-bounds read in the NDIS driver that could allow an authorized attacker with physical access to disclose data. In the Nessus/NCSC/NVD entries, the CVE is flagged under Windows NDIS...

CVE-2026-24294

CVE-2026-24294 affects Windows SMB Server. The core issue is improper authentication in the SMB component, enabling an authorized local attacker to elevate privileges. The CVE is rated high (CVSS 3.1 base 7.8) with local attack vector, low complexity, and no user interaction required, and the imp...

CVE-2026-42971

CVE-2026-42971 involves a use of an uninitialized resource in Windows Push Notifications, enabling a locally authenticated attacker to disclose information. Affected component: Windows Push Notifications. Root cause: use of an uninitialized resource. Impact: local information disclosure with Conf...

CVE-2026-45595

Technical details about CVE-2026-45595 are not publicly available in the provided documents. Monitor for updates about affected components, root cause, and remediation.

CVE-2026-50670

CVE-2026-50670 is a Windows Win32k elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows kernel. Connected sources confirm local privilege escalation potential and indicate Microsoft has released updates (e.g., KB5099538/KB5099540; MSRC guidance) addressing this issu...

CVE-2026-62771

CVE-2026-62771 describes a heap-based buffer overflow in Windows Cloud Files Mini Filter Driver that allows an authorized attacker to elevate privileges locally. Impact is local privilege escalation with high severity (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The provided documents do not...

CVE-2026-65790

CVE-2026-65790 is a heap-based buffer overflow in Windows Message Queuing that enables an authorized, locally authenticated attacker to achieve elevation of privilege. Affected component: Windows Message Queuing; root cause: improper heap handling leading to a overflow condition. Impact: local pr...

CVE-2026-65798

CVE-2026-65798 corresponds to a numeric truncation error in Windows DNS that enables an authorized attacker to perform local privilege escalation. Affected component: Windows DNS. Root cause: numeric truncation in DNS handling leading to elevated privileges. Impact is described as local elevation...

CVE-2026-69518

CVE-2026-69518 is a heap-based buffer overflow in Windows Remote Desktop that allows an unauthorized attacker to execute code over a network. The vulnerability is classified with CVSS 3.1 score 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable attack...

CVE-2025-29960

CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) can lead to information disclosure over the network. The description specifies network-based access with high confidentiality impact; no explicit product version or fix details are provided in the connected doc...

CVE-2025-55229

CVE-2025-55229 concerns improper verification of cryptographic signatures in Windows Certificates, enabling a network attacker to spoof over the network. The primary root cause is flawed verification during certificate handling, with the CVSS data indicating network access, low attack complexity,...

CVE-2026-41097

CVE-2026-41097 describes a local security bypass in Windows Secure Boot caused by reliance on a non-updateable component. An authorized attacker could bypass a security feature locally. The CVE’s metrics show a medium base score (CVSS 3.1: 6.7; Local attack vector; high confidentiality/integrity/...

CVE-2026-44805

CVE-2026-44805: Use-after-free in Windows Network Controller (NC) Host Agent enables an authorized local attacker to cause denial of service. Affected component is the Windows Network Controller Host Agent; underlying cause is use-after-free. CVSSv3.1 base score 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I...

CVE-2026-47648

CVE-2026-47648 — Windows Storage contains an untrusted search path vulnerability that enables a locally authenticated attacker to perform privilege escalation. The issue arises from a trusted component loading an untrusted search path, potentially elevating privileges with high impact (C/H/I/H/A/...

CVE-2026-50680

CVE-2026-50680 is a heap-based buffer overflow in Windows Hyper-V that enables local privilege escalation by an authorized attacker. The issue affects Hyper-V and is exploitable locally with high privileges required and no user interaction, per the CVE description and details in connected documen...

CVE-2026-56648

CVE-2026-56648 is a Windows Network File System (NFS) server vulnerability described as a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized attacker to elevate privileges over the network. Public sources identify the root cause as a TOCTOU race in NFS and classify t...

CVE-2026-61920

CVE-2026-61920 – Windows DNS Server : A race condition caused by improper synchronization on a shared resource enables an authorized attacker to execute code over a network. Affected product: Windows DNS Server. Root cause: concurrent execution due to lack of proper synchronization in the shared ...

CVE-2026-65774

CVE-2026-65774 : Heap-based buffer overflow in the Windows Installer component allows an authorized, local attacker to elevate privileges. The issue is described as a local, low-attack-complexity vulnerability with high impact on confidentiality, integrity, and availability. No exploitation detai...

CVE-2026-73010

CVE-2026-73010 is a use-after-free vulnerability in Windows Failover Cluster that allows an unauthenticated, remote attacker to achieve code execution over the network. Microsoft rates it CVSS 9.8 (Critical) with low attack complexity, no required privileges, and high impact to confidentiality, i...

CVE-2025-29961

Technical details for CVE-2025-29961 are not provided in the connected documents. The RRAS out-of-bounds read description exists in the Initial Document, but no vendor/affected versions, root cause, or fixes are confirmed here. Monitor for updates.

CVE-2025-49689

Technical details for CVE-2025-49689 (affected product/component/impact) are not publicly available in the provided documents. Monitor for updates from official sources; no concrete vendor/version/exploit information is available here.

CVE-2025-49690

CVE-2025-49690 is a local-privilege-elevation flaw in Windows' Capability Access Management Service (camsvc) caused by race-condition due to improper synchronization. The issue affects camsvc and can lead to elevated privileges on affected Windows builds. The CVE entry cites a local, user‑no‑inte...

CVE-2025-50173

CVE-2025-50173 is a Windows Installer local privilege-escalation vulnerability caused by weak authentication that enables an authenticated, local attacker to elevate privileges. The CVE is documented with a CVSS v3.1 base score of 7.8 (Impact: High; Privileges Required: Low; Scope: Unchanged; Loc...

CVE-2026-24296

CVE-2026-24296 affects Windows Device Association Service, where concurrent execution on a shared resource with improper synchronization (race condition) enables a local, authorized attacker to elevate privileges. The issue is documented across multiple sources (NVD/NCSC/ENISA/CVEs listing) with ...

CVE-2026-26168

CVE-2026-26168 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows an authorized local attacker to elevate privileges. Publicly referenced Red Hat and Dutch/NCSC/CIRCL sources confirm the Windows driver component and local privilege impact; exploitation sta...

CVE-2026-27920

CVE-2026-27920 is a Windows vulnerability in the UPnP Device Host that enables a local privilege escalation . The entry indicates a local attack vector with low required privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 base s...

CVE-2026-32074

CVE-2026-32074 concerns the Windows Projected File System (ProjFS) Elevation of Privilege. The vulnerability is local: attack vector Local, requires LOW privileges, with LOW attack complexity and no user interaction. It impacts confidentiality, integrity, and availability (all HIGH). The CVSS 3.1...

CVE-2026-40410

Technical details (affected component, root cause, affected versions, exploit vectors or fixes) are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2026-45639

The CVE-2026-45639 entry relates to an out-of-bounds read in Windows Remote Desktop Protocol (RDP). The underlying issue enables an unauthenticated, network-based attacker to disclose information over the network without user interaction. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:...

CVE-2026-50441

An active CVE: CVE-2026-50441 affects Windows Resilient File System (ReFS). Description confirms an Untrusted pointer dereference leading to local Privilege Escalation by an authorized attacker. Impact per CVSS: Local, Privilege Elevation, with High confidentiality/integrity/availability impact. ...

CVE-2026-54114

CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...

CVE-2026-56186

CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...

CVE-2026-62885

CVE-2026-62885 describes a heap-based buffer overflow in Windows Win32K that allows an authorized attacker to perform a local privilege escalation . The vulnerability is tied to the Win32K subsystem; the specific code path and vulnerable component are not further detailed in the provided document...

CVE-2026-69449

CVE-2026-69449 is a heap-based buffer overflow in Windows BitLocker that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector with high privileges required and no user interaction , resulting in high impact on confidentiality...