CVE-2026-45653

CVE-2026-45653: A Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The issue affects kernel code paths susceptible to use-after-free, with an attack vector that is LOCAL, requiring LOW privileges and NO user interaction; the impact per...

CVE-2026-50325

Technical details (affected versions, root cause, remediation) are not provided in the supplied documents; monitor for updates.

CVE-2026-50354

CVE-2026-50354 involves a use-after-free in the Windows Kernel that enables an authorized local attacker to elevate privileges. The affected source is the Windows Kernel; the vulnerability stems from memory management misuse leading to arbitrary code execution with SYSTEM-level privileges. Exploi...

CVE-2026-55001

CVE-2026-55001 affects Windows Active Directory / Active Directory Domain Services. The root cause is improper certificate validation within AD, enabling an authorized attacker to achieve local privilege escalation. CVSS 3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low; User In...

CVE-2026-56647

CVE-2026-56647 is a Windows vulnerability in the Windows Remote Access Service Infrastructure where an integer overflow/wraparound can let an authorized attacker elevate privileges over a network. The affected component is the Windows Remote Access Service Infrastructure, and the root cause is an...

CVE-2026-62769

CVE-2026-62769 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. The vulnerability arises from a faulty numeric handling (truncation) within the Windows DNS component, enabling local privilege escalation with high impact on confi...

CVE-2025-47159

CVE-2025-47159 affects Windows Virtualization-Based Security (VBS) Enclave. The vulnerability is a protection mechanism failure that could allow an authorized local attacker to escalate privileges. Affected component: VBS Enclave in Windows. Outcome: local privilege escalation with HIGH impact if...

CVE-2025-47987

Technical details of CVE-2025-47987 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2025-49664

Technical details about CVE-2025-49664 (affected components, root cause, impact, or remediation) are not provided in the connected documents. Monitor official advisories and vendor patch notes for authoritative information and fixes.

CVE-2025-49722

Technical details about CVE-2025-49722 are not present in the provided documents. No affected products, root cause, exploit vector, or fixes are disclosed here. Monitor for updates and consult the primary CVE entry for authoritative information.

CVE-2025-53789

CVE-2025-53789 affects Windows StateRepository API where missing authentication enables local privilege escalation. The NCSC advisory references this CVE with CVSS 3.1/7.8 (High) and impact described as escalating privileges. No explicit affected product/version details or fix/remediation are pro...

CVE-2026-20864

CVE-2026-20864 describes a heap-based buffer overflow in the Connected Devices Platform Service (Cdpsvc) on Windows that enables an authorized local attacker to elevate privileges. The vulnerability affects Cdpsvc and is rated high (CVSS v3.1 base 7.8; Local, Low Attack Complexity, Privileges Req...

CVE-2026-20923

CVE-2026-20923 is a use-after-free in Windows Management Services that allows an authorized, locally situated attacker to elevate privileges. Evidence from Nessus/NVD/CVE records shows this CVE is associated with Windows Management Services and is listed among January 2026 security updates. Remed...

CVE-2026-20927

CVE-2026-20927 affects Windows SMB Server and is described as a race-condition in a shared resource that can allow an authorized attacker to cause a denial of service over the network. The connected Nessus NASL entries list this CVE under Windows SMB Server with a 5.3 base score (Denial-of-Servic...

CVE-2026-25173

CVE-2026-25173 concerns Windows RRAS where a module/component used by RRAS may be exploited to achieve remote code execution. The CVE is categorized with CVSS v3.1: base score 8.0 (HIGH), attack Vector: Network, attack Complexity: Low, privileges Required: Low, user Interaction: Required, and imp...

CVE-2026-32077

CVE-2026-32077 is a Windows UPnP Device Host elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH) with a LOCAL attack vector, LOW attack complexity, and required LOW privileges; no user interaction is needed. Affects confidentiality, integrity, and availability (all HIGH i...

CVE-2026-32093

CVE-2026-32093 affects Windows Function Discovery Service (fdwsd.dll). The vulnerability is a race condition due to improper synchronization in shared resource access, enabling an authorized attacker to elevate privileges locally. Public sources (MSRC/MSKB advisories and NCSC) confirm the issue a...

CVE-2026-32162

CVE-2026-32162 is a Windows COM elevation of privilege vulnerability with local access, no user interaction, and high impact to confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.4 (HIGH) with exploit code maturity labeled UNPROVEN and remediation level OFFICIAL_FIX. Affec...

CVE-2026-32209

Technical details (affected components, exploit vectors, root cause, vulnerable versions, and fixes) are not publicly provided in the supplied documents. Monitor official updates from NVD/CVE for further information.

CVE-2026-34338

CVE-2026-34338 : Use-after-free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. The publicly provided documents confirm the vulnerability and impact but do not reveal affected Windows versions, exact internal component, or remediation details. The NVD ent...

CVE-2026-42984

CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...

CVE-2026-42986

CVE-2026-42986 describes a use-after-free in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally. Affected: Microsoft Graphics Component; vulnerability class: use-after-free leading to local privilege escalation. Root cause as stated: after-free condi...

CVE-2026-48563

CVE-2026-48563 describes a heap-based buffer overflow in the Remote Desktop Client that enables an unauthenticated attacker to execute code over the network. The accompanying metrics indicate a high-severity impact (CVSS 3.1 base score 7.5) with attacker control over network access, requiring use...

CVE-2026-48573

CVE-2026-48573 describes a protection mechanism failure in Windows Secure Boot allowing an authorized attacker to bypass a security feature locally. The NVD entry notes a local attack vector with high impact on confidentiality and integrity (C:H/I:H) and a CVSS v3.1 base score of 7.9. Connected d...

CVE-2026-48575

CVE-2026-48575 describes a protection mechanism failure in Windows Secure Boot that allows an authorized, local attacker to bypass a security feature. The vulnerability enables a local escalation path with high impact on confidentiality and integrity (base score 7.9; AV:L/AC:L/PR:H/UI:N/S:C/C:H/I...

CVE-2026-49801

The CVE-2026-49801 entry concerns Windows SMB: an uninitialized resource within SMB handling can lead to local information disclosure by an authorized user. The attack is described as local with low privileges required and no user interaction, and the impact targets confidentiality (information d...

CVE-2026-50359

CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...

CVE-2026-50412

CVE-2026-50412 is a Windows NTFS elevation-of-privilege vulnerability caused by a stack-based buffer overflow. The affected component is NTFS in Windows, allowing an authorized local attacker with low privileges and no user interaction to gain SYSTEM-level privileges (base CVSS v3.1: 7.8, Local, ...

CVE-2026-50463

CVE-2026-50463 is a Windows Kernel information-disclosure flaw (out-of-bounds read) that can be exploited remotely over a network to disclose data. The CVE is documented across NVD/EUVD and related feeds, and Microsoft has released updates (KB5099539/KB5099540 and MSRC page) addressing this vulne...

CVE-2026-50469

CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...

CVE-2026-50482

CVE-2026-50482 : Heap-based buffer overflow in Windows NTFS can allow a locally authenticated attacker to execute code. Exploitation requires local access with low privileges and user interaction, per the CVE metrics (AV:L, PR:L, UI:R). Public references indicate Microsoft has released updates to...

CVE-2026-50484

CVE-2026-50484 is a Windows Kernel heap-based buffer overflow that enables local privilege escalation for an authenticated attacker. Public docs confirm the vulnerability and affected component as the Windows Kernel, with the impact described as local privilege elevation. Microsoft and MSRC have ...

CVE-2026-50485

CVE-2026-50485 is a Windows Hyper-V Denial of Service vulnerability caused by a buffer over-read. It can be exploited by an attacker who has adjacent network access to deny service on the target host, with high privileges required and no user interaction. The documented impact is availability los...

CVE-2026-61924

Technical details about CVE-2026-61924 are not publicly provided in the supplied documents; monitor official advisories from Microsoft and NVD for updates, affected products, and remediations.

CVE-2026-62703

CVE-2026-62703: Out-of-bounds read in Windows DWM Core Library. An authenticated, local attacker can disclose information. Affected component: Windows DWM Core Library. Impact aligns with CVSS: Confidentiality High; Privileges Required Low; User Interaction None; Attack Vector Local. The provided...

CVE-2026-62715

The CVE-2026-62715 entry describes an integer underflow (wrap or wraparound) in Windows DHCP Server that allows an unauthorized attacker on an adjacent network to disclose information. Affected component: Windows DHCP Server. Cause: underflow in a function handling DHCP data; impact: information ...

CVE-2026-62738

The vulnerability CVE-2026-62738 affects Windows Management Instrumentation and enables an authorized, local attacker to disclose information through an out-of-bounds read. The available descriptions consistently state information disclosure as the impact; no details on specific vulnerable binari...

CVE-2026-62773

CVE-2026-62773 describes a use-after-free vulnerability in Windows Kerberos that enables a locally authenticated attacker to elevate privileges. The flaw is triggered in the Kerberos subsystem and, when exploited, could allow elevation of rights with high impact on confidentiality, integrity, and...

CVE-2026-62812

CVE-2026-62812 concerns Windows DHCP Server and describes an elevation of privilege via improper link resolution before file access ('link following'). An attacker with local, low-privilege access and no user interaction could elevate privileges to achieve high impact (CVSS v3.1: AV:L/AC:L/PR:L/U...

CVE-2026-73025

CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...

CVE-2025-48815

CVE-2025-48815 affects Windows OS via a type confusion in the SSDP Service that could allow an authorized local attacker to elevate privileges. The description states local privilege escalation with high impact (CVSSv3.1: 7.8, HIGH). No explicit exploitation details or vendor/product versions are...

CVE-2025-49663

Technical details for CVE-2025-49663 are not provided in the connected documents; the initial description mentions RRAS heap overflow but lacks concrete product/version/impact details—monitor for updates.

CVE-2025-49686

Technical details for CVE-2025-49686 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are confirmed here. Monitor for official updates from Microsoft and CVE references.

CVE-2025-53149

CVE-2025-53149 describes a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that an authorized, locally authenticated attacker could abuse to achieve local privilege elevation. The CVE is tracked with CVSS 3.1: Local, Low attack complexity, Low privileges required, no u...

CVE-2025-53808

CVE-2025-53808 is a local privilege-escalation in Windows Defender Firewall Service caused by a type confusion in resource access. Affected: Windows Defender Firewall Service (Windows). Impact and exploitability as per provided metrics: local, high privileges required, none user interaction, conf...

CVE-2025-54913

CVE-2025-54913 affects Windows UI XAML Maps MapControlSettings. It is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to locally elevate privileges. Reported CVSS base score ~7.8 (HIGH) with LOCAL attack vector...

CVE-2025-58718

CVE-2025-58718 is a use-after-free in the Windows Remote Desktop Client that allows a network-based, unauthenticated attacker to execute code on the affected system. CVSSv3.1 shows AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH); exploitation requires user interaction. Connect...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...

CVE-2025-59260

CVE-2025-59260 is an information-disclosure vulnerability in the Microsoft Failover Cluster Virtual Driver that can expose sensitive data to a locally authenticated attacker. The CVSS 3.1 vector indicates a local attack with low complexity and low privileges required, and a high confidentiality i...

CVE-2025-59275

CVE-2025-59275 involves Windows Authentication Methods with improper validation of a specified input type, enabling an authorized local attacker to escalate privileges. The connected EUVD-2025-34271 entry corroborates the same description. No technical details about affected product versions, roo...