CVE-2026-62752

CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...

CVE-2025-50153

Technical details about CVE-2025-50153 (affected components, root cause, impact specifics, and fixes) are not provided in the connected documents. Monitor for updates from MSRC/NVD for technical disclosure.

CVE-2026-27926

CVE-2026-27926 is a race-condition elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver. The issue allows an authorized, locally positioned attacker to escalate privileges via concurrent access to a shared resource. Public details confirm impact as local, with the CV...

CVE-2026-42973

Technical details (affected software, conditions, exploitability, and remediation) are not publicly available in the provided documents; monitor for updates.

CVE-2026-50415

CVE-2026-50415 affects Windows Media. The issue is exposure of sensitive information to an unauthorized actor over a network, enabling information disclosure. NVD and other sources describe a network-available impact with high confidentiality impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2026-50433

CVE-2026-50433 (Windows Media) is a use-after-free vulnerability in Windows Media that enables a locally authenticated attacker to elevate privileges. Affected component: Windows Media. Root cause: use-after-free error. Impact: local privilege escalation with high severity (CVSS 3.1 base score 7....

CVE-2026-50439

CVE-2026-50439 affects Microsoft Message Queuing Queue Manager. Description and connected records confirm a use-after-free vulnerability that allows an unauthenticated attacker to execute code remotely over a network. Impact is described as remote code execution with high-severity CVSS in public ...

CVE-2026-54115

CVE-2026-54115 is a Windows Message Queuing (MSMQ) elevation of privilege vulnerability with an integer overflow/wraparound issue described as affecting Windows Active Directory. The CVE entry indicates an authorized, local attacker can elevate privileges. Public references show multiple advisori...

CVE-2026-61920

CVE-2026-61920 – Windows DNS Server : A race condition caused by improper synchronization on a shared resource enables an authorized attacker to execute code over a network. Affected product: Windows DNS Server. Root cause: concurrent execution due to lack of proper synchronization in the shared ...

CVE-2026-62716

CVE-2026-62716 involves an integer underflow in Windows DHCP Server that permits information disclosure to an adjacent network. The affected component is Windows DHCP Server; the root cause is a wrap/wraparound error enabling data disclosure, with attack vector described as adjacent network acces...

CVE-2026-62876

The CVE-2026-62876 vulnerability affects Windows Win32K, with an out-of-bounds read that allows an authorized, local attacker to elevate privileges. Affected component: Win32K (Windows). Root cause and impact are: local escalation to higher integrity/privilege with potential confidentiality, inte...

CVE-2025-47975

Technical details about CVE-2025-47975 are not publicly provided in the connected documents. The available sources do not describe affected products/versions, root cause specifics, impact beyond the general privilege escalation claim, or fixes. Monitor for updates.

CVE-2025-49665

Technical details about CVE-2025-49665 are not publicly available in the provided connected documents. The current materials only include a general description and CVSS metrics. Monitor for updates from official advisories.

CVE-2025-49666

CVE-2025-49666 is a Windows Kernel flaw described as a heap-based buffer overflow that enables remote code execution by an authorized attacker over a network. Public data lists attack vector as Network with high impact to confidentiality, integrity, and availability, and requires HIGH privileges ...

CVE-2025-49726

CVE-2025-49726 is a Windows vulnerability described as a use-after-free in Windows Notification that allows an authenticated local attacker to escalate privileges. The initial document provides a high-level impact (local, high confidentiality/integrity/availability impact) and does not reveal exp...

CVE-2025-55236

Technical details for CVE-2025-55236 are not provided in the connected documents. Monitor for updates (no vendor/version/root-cause/fix details in the supplied sources).

CVE-2026-25179

CVE-2026-25179 affects the Windows Ancillary Function Driver for WinSock and is caused by improper validation of a specified input type, enabling a locally authenticated attacker to elevate privileges. The entry carries a CVSS v3.1 base score of 7.0 (High) with Local attack, High confidentiality/...

CVE-2026-26111

Summary: CVE-2026-26111 is a Windows RRAS (Routing and Remote Access Service) vulnerability caused by an integer overflow/wraparound that could allow a network-based attacker to perform remote code execution. The CVSSv3.1 base metrics indicate high severity (8.0 base score in the CVE entry; relat...

CVE-2026-26184

CVE-2026-26184 is a Buffer over-read in the Windows Projected File System that can enable local privilege elevation for an authenticated user. Connected sources confirm it is tracked under Windows Projected File System and that Microsoft has released security updates to fix vulnerabilities in Win...

CVE-2026-27927

CVE-2026-27927 is a Windows Projected File System vulnerability described as a race condition due to concurrent execution on a shared resource, enabling an authorized local attacker to elevate privileges. Connected sources (Microsoft MSRC, Red Hat, Netherlands NCSC) corroborate the Windows Projec...

CVE-2026-32170

Technical details for CVE-2026-32170 are not publicly available in the provided documents beyond the basic description. No vendor, product, version, root cause, impact, or fix specifics are supplied here. Monitor official disclosures and CVE/Microsoft update guidance for updates.

CVE-2026-35416

CVE-2026-35416 describes a local privilege escalation due to a use-after-free in the Windows Ancillary Function Driver for WinSock. The description in the connected documents confirms the vulnerable component and the root cause as a use-after-free, leading to elevation of privileges for an author...

CVE-2026-35417

CVE-2026-35417 describes a type confusion vulnerability in Windows Win32K — ICOMP, where an attacker with local access could elevate privileges. The initial description states an authorized user can benefit locally, indicating a local privilege escalation with high impact (CVSS v3.1 base score 7....

CVE-2026-40406

Technical details about CVE-2026-40406 are not publicly available in the provided documents; monitor for updates as additional specifics (affected products, root cause, fixes) may be released.

CVE-2026-49184

The CVE-2026-49184 entry describes a heap-based buffer overflow in Windows NTFS that allows a local attacker to execute code. Affected component: Windows NTFS subsystem; root cause is a heap-based overflow. Impact: local code execution with high severity (CVSSv3.1 base score 8.4). No specific pat...

CVE-2026-50382

CVE-2026-50382 is a Windows DirectX DirectX Graphics Kernel vulnerability caused by an untrusted pointer dereference, enabling a locally authenticated attacker to gain code execution. The issue affects the DirectX Graphics Kernel component of Windows DirectX and is listed among high-severity, loc...

CVE-2026-50407

CVE-2026-50407 : A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized local attacker to elevate privileges. The vulnerability is confirmed in multiple feeds (NVD/NCSC/MSRC) and is listed under ReFS with an impact of local privilege escalation. Microsoft has re...

CVE-2026-50496

CVE-2026-50496 is an out-of-bounds read vulnerability in Windows Network Policy Server SNMP that allows an unauthenticated attacker to disclose information over the network. Affects the SNMP component of Windows NPS; impact is information disclosure with a CVSS v3.1 base score of 7.5 (Network att...

CVE-2026-50681

CVE-2026-50681 is a Windows Secure Channel information disclosure vulnerability in Windows Cryptographic Services. The available documents describe exposure of sensitive information to an unauthorized actor, allowing a locally authenticated attacker to disclose data. Connected sources confirm the...

CVE-2026-54114

CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...

CVE-2026-59135

The CVE-2026-59135 entry describes a weakness in the Microsoft Windows Search Component where weak authentication could allow an authorized local attacker to disclose information. Affected software is Windows with the Windows Search Component implicated as the vulnerable element; root cause is we...

CVE-2026-62721

Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-62761

CVE-2026-62761 affects Windows DHCP Server. The issue is improper link resolution before file access ("link following"), allowing an authorized attacker to locally elevate privileges. Root cause is in the DHCP Server component; impact is local privilege escalation with high confidentiality/integr...

CVE-2026-62786

CVE-2026-62786 is a Windows Win32K out-of-bounds read vulnerability that allows an authenticated, locally privileged attacker to disclose information. The CVE entry notes local attack vector with low privileges required and no user interaction, and a CVSSv3.1 base score of 5.5 (Medium). Public re...

CVE-2025-48808

Technical details about CVE-2025-48808 are not provided in the connected documents. The materials reference Windows security updates generally but do not specify affected kernel components, versions, or fixes. Monitor official advisories for details.

CVE-2025-53144

CVE-2025-53144 is a Windows Message Queuing (MSMQ) remote code execution vulnerability caused by a type confusion flaw in MSMQ. The issue allows an attacker to execute code over the network on a affected Windows host when MSMQ is reachable; CVSSv3.1 indicates AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H w...

CVE-2025-53149

CVE-2025-53149 describes a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that an authorized, locally authenticated attacker could abuse to achieve local privilege elevation. The CVE is tracked with CVSS 3.1: Local, Low attack complexity, Low privileges required, no u...

CVE-2025-59277

CVE-2025-59277 involves improper validation of a specified input type in Windows Authentication Methods, enabling a locally authenticated attacker to elevate privileges. Connected MSKBs and EUVD-2025-34369 corroborate the Windows Authentication Methods focus and local privilege escalation risk. T...

CVE-2026-20852

CVE-2026-20852 is a Windows Hello privilege-assignment vulnerability that enables a locally authenticated attacker to tamper with local data due to incorrect privilege handling in the Windows Hello component. The issue is labeled as a local, high-severity problem with no user interaction required...

CVE-2026-24297

CVE-2026-24297 : Windows Kerberos contains a race condition in a shared resource that can allow a network-based bypass of a security feature. The vulnerability is listed across multiple sources (NVD, OSV, CIRCL, ENISA EUVD, CVE list) and is associated with Windows Kerberos components. Exploitatio...

CVE-2026-26152

CVE-2026-26152 pertains to Microsoft Cryptographic Services with a local elevation-of-privilege vulnerability. The CVSS 3.1 vector indicates local access, high impact on confidentiality, integrity, and availability, with user interaction not required. PrivilegesRequired is LOW, AttackComplexity i...

CVE-2026-26176

Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.

CVE-2026-26178

CVE-2026-26178 is a Windows Advanced Rasterization Platform Elevation of Privilege vulnerability with CVSS v3.1 base score 8.8 (HIGH). The issue is exploitable via NETWORK with LOW attack complexity and NONE privileges required, but it requires user interaction. Impact is rated HIGH for confident...

CVE-2026-32068

CVE-2026-32068 impacts Windows SSDP service, enabling local elevation of privilege via the Simple Search and Discovery Protocol. The issue is local, requires low privileges, and does not require user interaction. CVSS v3.1 base score 7.0 (HIGH) with HIGH impact on confidentiality, integrity, and ...

CVE-2026-34330

Technical details about CVE-2026-34330 (Win32K GRFX integer overflow leading to local privilege elevation) are not publicly provided in the supplied connected documents. Please monitor official advisories (MSRC/NVD) for affected products, impact, and fixes.

CVE-2026-34334

Technical details (affected component, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2026-34341

CVE-2026-34341 is a Windows LLDP (Link-Layer Discovery Protocol) vulnerability described as a double free in LLDP that allows an authenticated, local attacker to gain elevated privileges. The connected documents confirm the issue and impact (local privilege escalation) but do not provide concrete...

CVE-2026-34347

Technical details about CVE-2026-34347 are not publicly provided in the connected documents. The initial description notes a use-after-free in Windows Win32K GRFX enabling local privilege elevation, but no patch/version specifics are included in the supplied materials.

CVE-2026-40413

Technical details about CVE-2026-40413, including affected products, vulnerable components, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor official advisories for updates.

CVE-2026-50329

CVE-2026-50329 is a Windows DWM Core Library elevation-of-privilege vulnerability rooted in a use-after-free in the Windows kernel. The available connected sources confirm the affected component as Windows DWM Core Library (Windows Kernel) and describe local privilege escalation possible by an au...