CVE-2026-20934

Technical details about CVE-2026-20934 are not publicly provided in the supplied connected documents. Monitor for updates from Microsoft and security advisories.

CVE-2026-20937

CVE-2026-20937 affects Windows File Explorer and is described as an information-disclosure vulnerability allowing a locally authorized attacker to disclose information. The provided documents confirm a Windows File Explorer exposure, with CVSS 3.1/5.5 (Local access, Low attack complexity, High co...

CVE-2026-21222

CVE-2026-21222 is a Windows Kernel information-disclosure vulnerability where insertion of sensitive data into a kernel log file could allow a locally authenticated attacker with LOW privileges to read sensitive data (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The connected sources confirm t...

CVE-2026-25166

CVE-2026-25166 /Windows System Image Manager ADK: A.local, low-privilege, no-user-interaction remote code execution vulnerability with high impact (C/H/I/A) per CVSS 3.1; fix is an official update. Exploitation details are not provided in the document.

CVE-2026-26173

CVE-2026-26173 affects the Windows Ancillary Function Driver for WinSock and is described as a race-condition vulnerability in a shared-resource path that can allow an authenticated local attacker to elevate privileges to SYSTEM. The connected sources confirm this is a Windows elevation-of-privil...

CVE-2026-27914

CVE-2026-27914 affects the Microsoft Management Console (MMC). It is an Elevation of Privilege vulnerability where a local attacker with low privileges and no user interaction can potentially gain high impact on confidentiality, integrity, and availability due to the underlying root cause describ...

CVE-2026-33842

The CVE-2026-33842 entry describes a local information disclosure in Windows File Explorer. The vulnerability allows an authorized (low privileges) attacker to disclose sensitive information locally through the File Explorer component. Per the NVD entry, the impact is confined to confidentiality ...

CVE-2026-45596

The CVE-2026-45596 entry concerns a use-after-free in the Windows Ancillary Function Driver for WinSock, leading to local privilege elevation. Affected component/function is the Windows AFD for WinSock; root cause is a use-after-free condition that can be exploited by an authorized local attacker...

CVE-2026-50482

CVE-2026-50482 : Heap-based buffer overflow in Windows NTFS can allow a locally authenticated attacker to execute code. Exploitation requires local access with low privileges and user interaction, per the CVE metrics (AV:L, PR:L, UI:R). Public references indicate Microsoft has released updates to...

CVE-2026-57088

CVE-2026-57088 is an Elevation of Privilege vulnerability in the Extensible Storage Engine (ESENT). Multiple connected sources confirm improper access control allowing an authorized local attacker to escalate privileges. CVSS 3.1 vectors indicate Local Access, Low Privilege required, with High co...

CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2025-55683

CVE-2025-55683 — Windows Kernel Information Disclosure . The vulnerability is a local information disclosure in the Windows Kernel that could allow an authenticated/authorized attacker to disclose sensitive data. Current documentation assigns a low to moderate impact on confidentiality (CVSS v3.1...

CVE-2025-59186

Technical details about CVE-2025-59186 are not publicly provided in the supplied documents. No product/version/root-cause/fix specifics are available here. Monitor updates from Microsoft/NVD/NCSC for remediation and affected components.

CVE-2026-20827

CVE-2026-20827 affects the Tablet Windows User Interface (TWINUI) Subsystem, enabling local disclosure of sensitive information to an attacker with low privileges and no user interaction. The vulnerability is mapped to a local-attack vector with high confidentiality impact (C:H, I:N, A:N) and a C...

CVE-2026-20858

CVE-2026-20858 is a Windows Management Services use-after-free local privilege escalation (high risk, CVSS 7.8). Connected documents confirm it affects Windows Management Services and is tracked in Microsoft’s January 2026 security updates (e.g., KB5073379/KB5073457). Remediation is via the poste...

CVE-2026-20939

CVE-2026-20939: Windows File Explorer information disclosure allowing a locally authenticated user to view sensitive data. The issue has a CVSSv3.1 base score of 5.5 (Local, Low attack complexity, Low privileges, Confidentiality impact: High). Microsoft has released fixes in January 2026 security...

CVE-2026-21239

CVE-2026-21239 describes a heap-based buffer overflow in the Windows Kernel. An authorized attacker can achieve local privilege escalation. The vulnerability is rated CVSS v3.1 base score 7.8 (HIGH) with LOCAL, low complexity, and no user interaction required beyond initial access, and it has hig...

CVE-2026-25168

CVE-2026-25168 is a Windows Graphics Component denial-of-service vulnerability. Exploitation requires local access with low complexity and no user interaction, and can cause an availability impact flagged as HIGH. The CVSSv3.1 score is 6.2 (MEDIUM overall) with an exploit that is unproven and rem...

CVE-2026-25171

Use-after-free in Windows at the level of Windows Authentication Methods allows an authorized attacker to elevate privileges locally. The vulnerability, CVE-2026-25171, is documented as a local privilege escalation in Windows Authentication Methods; exploitation requires the attacker to be locall...

CVE-2026-26163

CVE-2026-26163 is a Windows Kernel elevation-of-privilege vulnerability described as a double free allowing an authorized local attacker to escalate privileges. Connected sources confirm the affected surface is Windows Kernel and the issue enables local privilege escalation with high impact. The ...

CVE-2026-26184

CVE-2026-26184 is a Buffer over-read in the Windows Projected File System that can enable local privilege elevation for an authenticated user. Connected sources confirm it is tracked under Windows Projected File System and that Microsoft has released security updates to fix vulnerabilities in Win...

CVE-2026-32083

CVE-2026-32083 pertains to Windows’ Simple Search and Discovery Protocol (SSDP) Service elevation of privilege. The vulnerability is local, with low privileges required and no user interaction, and yields a high impact on confidentiality, integrity, and availability. Microsoft lists an official f...

CVE-2026-33099

Technical details (affected products, root cause, vulnerable components, or exploitation specifics) are not publicly provided in the supplied documents. Monitor for updates from sources like MSRC and the CVE record.

CVE-2026-42975

CVE-2026-42975 affects the Windows Bluetooth Port Driver and is caused by a heap-based buffer overflow. This can allow an unauthenticated attacker to execute code on a target system over an adjacent network. The documented impact is high (remote code execution with full device compromise) and the...

CVE-2026-58545

CVE-2026-58545 is a Windows Kernel Security Feature Bypass vulnerability. The connected documents confirm an improper access control in the Windows Kernel that could let an authoriz­ed locally attacker bypass a security feature. Metrics indicate CVSS v3.1 base score 5.5 (Medium), with Local attac...

CVE-2025-59205

CVE-2025-59205 is described as a race-condition vulnerability in the Microsoft Graphics Component caused by concurrent access to a shared resource, enabling an authorized local attacker to elevate privileges. The connected EUVD-2025-34293 entry reiterates the root cause and local privilege escala...

CVE-2025-59509

CVE-2025-59509 affects Windows Speech, with the issue described as insertion of sensitive information into data sent by Windows Speech. The impact is local disclosure of information to an authorized attacker. The Connected documents confirm Windows-related fixes and hotpatch updates, but do not p...

CVE-2025-62462

CVE-2025-62462 is a Windows ProjFS (Projected File System) Elevation of Privilege vulnerability caused by a buffer over-read, enabling an authorized local attacker to escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL and LOW privileges required and no user interaction. Connec...

CVE-2025-62472

CVE-2025-62472 affects Windows Remote Access Connection Manager. The issue is described as an elevation of privilege vulnerability caused by use of an uninitialized resource, allowing an authorized local attacker to gain higher privileges. Microsoft’s December 2025 updates (e.g., KB5071501/KB5071...

CVE-2025-64680

CVE-2025-64680 affects Windows DWM Core Library. A heap-based buffer overflow allows an authorized, locally authenticated attacker to escalate privileges. The connected advisories/feeds confirm this CVE is part of Microsoft Windows vulnerability fixes and that Windows updates (KBs and security gu...

CVE-2026-20925

CVE-2026-20925 affects Windows NTLM and is described as an external control of the file name or path that enables spoofing (pretend to be another user) over a network. The vulnerability is assigned a CVSS v3.1 base score of 6.5 (Medium) with network attack vector and required user interaction. Co...

CVE-2026-24287

CVE-2026-24287 is a Windows kernel elevation-of-privilege vulnerability with a local attack vector. The CVSS 3.1 metrics indicate high impact to confidentiality, integrity, and availability, requiring low privileges and no user interaction, with exploit code maturity marked as UNPROVEN. The issue...

CVE-2026-24295

CVE-2026-24295 concerns the Windows Device Association Service Elevation of Privilege. The entry indicates a LOCAL attack with LOW privileges required and NO user interaction, leading to HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH). The vulne...

CVE-2026-32215

CVE-2026-32215 is a Windows Kernel information-disclosure vulnerability caused by insertion of sensitive data into a log file, enabling an authenticated, local attacker to disclose information. Affected component is the Windows Kernel logging path; the described impact is local confidentiality br...

CVE-2026-33100

CVE-2026-33100: Use-after-free in Windows Ancillary Function Driver for WinSock allows a locally authorized privilege escalation. The connected advisory set confirms the driver as affected and lists CVE-2026-33100 with a base CVSS v3.1 score of 7.0 (High) and local attack vector. Mitigation is vi...

CVE-2026-34349

CVE-2026-34349 describes a local information disclosure in Windows Media where sensitive data is exposed to an unauthorized actor, potentially enabling a local attacker with low privileges and no user interaction to disclose information. The report notes a CVSSv3.1 base score of 5.5 (Medium), wit...

CVE-2026-49796

CVE-2026-49796 is a heap-based buffer overflow in Windows GDI+ that can let a local attacker execute code. Affected: Windows GDI+ component; root cause is a heap buffer overflow. Impact per CVSS: local attack with user interaction required, high confidentiality, integrity, and availability impact...

CVE-2026-50372

CVE-2026-50372 — Windows Redirected Drive Buffering : A buffer over-read vulnerability in Windows Redirected Drive Buffering could allow an authorized, local attacker to elevate privileges. The CVE is corroborated by multiple sources (NVD, MSRC, EUVD/ENISA, CIRCL sighting) with an incident descri...

CVE-2026-50391

CVE-2026-50391 is a Microsoft Windows Group Policy privilege-escalation vulnerability. Affects Windows Group Policy functionality; root cause is improper privilege management that permits an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.8 (High) with local, low attack co...

CVE-2026-50430

CVE-2026-50430 is the Windows Push Notifications information-disclosure vulnerability. The available sources state that exposure of sensitive information to an unauthorized actor can occur, allowing a locally-present attacker to disclose information. Affected component: Windows Push Notifications...

CVE-2026-50647

CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...

CVE-2026-57092

CVE-2026-57092 — Windows VMSwitch use-after-free can lead to a network-based Elevation of Privilege. The issue is triggered in the Windows VMSwitch component and, per sources, enables an authorized attacker to escalate privileges over the network. The CVE is listed as critical (CVSS v3.1: AV:N/AC...

CVE-2025-59510

Technical details about CVE-2025-59510 (RRAS in Windows) are not publicly provided in the supplied documents. Monitor for updates from Microsoft regarding affected products, impact, and remediation.

CVE-2025-59514

Technical details about CVE-2025-59514 are not provided in the supplied documents. No affected product versions, root cause, or remediation are specified here. Monitor for updates from official sources for confirmation and fixes.

CVE-2025-59516

CVE-2025-59516 is a Windows Storage VSP Driver elevation-of-privilege vulnerability. The issue is described as missing authentication for a critical function, enabling an authorized local attacker to elevate privileges. Public references in connected documents confirm the affected component is th...

CVE-2025-60707

CVE-2025-60707 is described in the connected documents as a use-after-free vulnerability in the Multimedia Class Scheduler Service (MMCSS) that can enable an authorized, local attacker to escalate privileges. The NCSC advisory explicitly associates this CVE with MMCSS and marks the impact as obta...

CVE-2025-60717

CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...

CVE-2026-20829

CVE-2026-20829 is a TPM Trustlet Information Disclosure vulnerability in Windows TPM: an out-of-bounds read can allow an authorized, local attacker to disclose information. The linked Nessus/NVD/CIRCL entries confirm Windows TPM involvement and a local attack vector with low privileges. Microsoft...

CVE-2026-20872

CVE-2026-20872 affects Windows NTLM: external control of a file name or path allows an attacker to spoof authentication over the network. The description states this vulnerability and related references indicate a Windows NTLM spoofing risk. The connected Nessus/NCSC/EUVD/NVD entries confirm the ...

CVE-2026-20924

CVE-2026-20924 is a Windows Management Services use-after-free vulnerability that allows an authorized, local attacker to elevate privileges. The CVE is listed among Windows Management Services findings with a high base CVSS (7.8, LOCAL, HIGH impact). Connected sources confirm the vulnerability n...