CVE-2025-55696

CVE-2025-55696 describes a time-of-check time-of-use (TOCTOU) race condition in the NtQueryInformation Token function (ntifs.h) that can allow a local, authorized attacker to elevate privileges. The connected Microsoft advisories indicate Windows updates addressing security vulnerabilities in Oct...

CVE-2026-21255

CVE-2026-21255 is a Windows Hyper-V security feature bypass vulnerability described as improper access control that enables an authorized local attacker to bypass a security feature. Publicly available sources identify Hyper-V as the affected component, with the root cause tied to access-control ...

CVE-2026-26183

CVE-2026-26183 involves the Remote Access Management service/API (RPC server). According to the provided metrics, the vulnerability enables local Elevation of Privilege with a Low attack complexity and Low privileges required, and no user interaction. The impact is High for confidentiality, integ...

CVE-2026-27922

CVE-2026-27922 is a vulnerability described as a use-after-free in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. The Red Hat/NVD entries confirm the same description. The connected documents do not enumerate affected product v...

CVE-2026-32079

CVE-2026-32079 is a Web Account Manager information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (MEDIUM). It is exploitable locally with low attack complexity and low privileges required; user interaction is not required. The confidentiality impact is HIGH, while integrity and avai...

CVE-2026-33100

CVE-2026-33100: Use-after-free in Windows Ancillary Function Driver for WinSock allows a locally authorized privilege escalation. The connected advisory set confirms the driver as affected and lists CVE-2026-33100 with a base CVSS v3.1 score of 7.0 (High) and local attack vector. Mitigation is vi...

CVE-2026-35415

Technical details about CVE-2026-35415 are not publicly available in the provided connected documents. Monitor for updates for specifics on affected products, impact, and mitigations once they are published.

CVE-2026-49183

CVE-2026-49183 describes a race condition in Windows Clipboard Server due to improper synchronization, enabling a local attacker with low privileges to elevate to higher rights. The affected component is the Windows Clipboard Server (shared resource handling) and the root cause is concurrent exec...

CVE-2026-50359

CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...

CVE-2026-50485

CVE-2026-50485 is a Windows Hyper-V Denial of Service vulnerability caused by a buffer over-read. It can be exploited by an attacker who has adjacent network access to deny service on the target host, with high privileges required and no user interaction. The documented impact is availability los...

CVE-2026-50684

CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...

CVE-2026-61937

CVE-2026-61937 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer overflow/wraparound. An authenticated, local attacker could exploit this to gain elevated privileges on affected systems. The available documents identify the vulnerable component as Windows HTTP.sys an...

CVE-2026-62724

CVE-2026-62724 is a local privilege escalation affecting the Windows Telephony Service due to a use-after-free. An authorized attacker can elevate privileges locally. Root cause: use-after-free in Telephony service code; impact: high (local elevation of rights) per CVSS 3.1; exploitability and ex...

CVE-2026-62730

CVE-2026-62730 describes a buffer over-read in the Windows Wired AutoConfig Service that can disclose information locally. The issue is exploitable by an authorized, low-privilege local attacker (LOCAL attack vector, LOW privileges, no user interaction) with a CVSS v3.1 base score of 5.5 (HIGH co...

CVE-2026-62745

Summary: CVE-2026-62745 is an information-disclosure vulnerability in Windows DHCP Server caused by an integer underflow (wrap/wraparound). The issue enables an unauthenticated attacker on an adjacent network to potentially disclose information. CVSS 3.1 base score is 6.5 (Medium) with attack vec...

CVE-2026-65798

CVE-2026-65798 corresponds to a numeric truncation error in Windows DNS that enables an authorized attacker to perform local privilege escalation. Affected component: Windows DNS. Root cause: numeric truncation in DNS handling leading to elevated privileges. Impact is described as local elevation...

CVE-2025-49660

Technical details about CVE-2025-49660 (affected product/component/version, root cause, impact, exploit status, or available patch) are not provided in the connected documents; monitor official disclosures for updates.

CVE-2025-50158

CVE-2025-50158 is a TOCTOU race condition in Windows NTFS that could allow a local attacker to disclose information. The description confirms the vulnerability is a local information-disclosure flaw affecting NTFS. Connected sources list CVE-2025-50158 under Windows NTFS with an impact of Access ...

CVE-2025-50177

CVE-2025-50177 affects Windows Message Queuing (MSMQ) with a use-after-free in the MSMQ path that enables remote code execution over a network. Affected: Windows MSMQ component. Impact per CVSS: high (8.1) with network access, no user interaction required. Exploitation as of the connected documen...

CVE-2025-54092

Technical details for CVE-2025-54092 are not publicly provided in the supplied documents. Connected KB/MSFT resources reference related issues but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.

CVE-2025-59244

CVE-2025-59244 affects Windows Core Shell and enables spoofing via external control of a file name or path over a network. It has a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). The vulnerability is listed under Windows Core Shell in the connected KB documents, and Microsoft ...

CVE-2025-60708

CVE-2025-60708 affects Storvsp.sys driver and, per the NC SC advisories, enables Denial-of-Service via an untrusted pointer dereference. The vulnerability is localized (requires local access) and relates to the Storvsp.sys component in Windows. The provided connected documents confirm the affecte...

CVE-2025-60715

Technical details about CVE-2025-60715 (RRAS heap overflow, affected components, fixes) are not provided in the connected documents. Public technical specifics, affected versions, and remediation steps are not disclosed here; monitor for official updates.

CVE-2026-20824

CVE-2026-20824 is a Windows Remote Assistance vulnerability described as a protection mechanism failure that enables a local attacker to circumvent a security measure. It is listed with a local attack vector, requiring user interaction, and a high confidentiality impact. Connected sources identif...

CVE-2026-20831

The CVE-2026-20831 entry corresponds to a TOCTOU race condition in Windows Ancillary Function Driver for WinSock that could allow a local, authenticated attacker to elevate privileges. The description in the initial document confirms local privilege escalation as the impact. Connected documents i...

CVE-2026-33099

Technical details (affected products, root cause, vulnerable components, or exploitation specifics) are not publicly provided in the supplied documents. Monitor for updates from sources like MSRC and the CVE record.

CVE-2026-33826

CVE-2026-33826 is a Windows Active Directory (AD DS) Remote Code Execution vulnerability. Connected documents describe an unauthenticated network-based exploit where malformed Kerberos/RPC authentication requests to a Domain Controller trigger memory corruption in LSASS, allowing arbitrary code e...

CVE-2026-45593

CVE-2026-45593 is a use-after-free vulnerability in the Windows SDK that allows an authorized attacker to elevate privileges locally. The NVD/CVE entries describe that the underlying issue is a use-after-free in Windows SDK code leading to local privilege escalation with a CVSS v3.1 base score of...

CVE-2026-49801

The CVE-2026-49801 entry concerns Windows SMB: an uninitialized resource within SMB handling can lead to local information disclosure by an authorized user. The attack is described as local with low privileges required and no user interaction, and the impact targets confidentiality (information d...

CVE-2026-50294

CVE-2026-50294 : Windows Kernel exposes sensitive system information to an unauthorized control sphere, enabling a local attacker to disclose information. Documents confirm a local attack vector with high confidentiality impact; no exploitation details or remediation are provided in the connected...

CVE-2026-50352

CVE-2026-50352 affects Windows Cryptographic Services. Description: Exposure of sensitive information to an unauthorized actor allows a locally authenticated attacker to disclose information. Impact: information disclosure (CONFIDENTIALITY) with LOCAL attack vector; CVSS 3.1 base 5.5 (AV:L/AC:L/P...

CVE-2026-50383

CVE-2026-50383 is a Windows Print Spooler Information Disclosure vulnerability (buffer over-read) in Print Spooler Components. It allows a locally authenticated attacker to disclose information on the affected system. According to the provided data, the attack vector is Local, with Low privileges...

CVE-2026-50484

CVE-2026-50484 is a Windows Kernel heap-based buffer overflow that enables local privilege escalation for an authenticated attacker. Public docs confirm the vulnerability and affected component as the Windows Kernel, with the impact described as local privilege elevation. Microsoft and MSRC have ...

CVE-2026-50683

CVE-2026-50683 is a Windows DHCP Client/Server heap-based buffer overflow that enables an authenticated attacker on an adjacent network to elevate privileges. Public details in the initial entry cite a heap-based overflow and adjacent-access attack path with high impact (C:H, I:H, A:H) and a CVSS...

CVE-2026-56643

CVE-2026-56643 is a DirectX Graphics Kernel elevation of privilege vulnerability tracked by Microsoft. It stems from a use-after-free in the Windows Kernel’s DirectX Graphics Kernel component, enabling a local attacker with normal privileges to escalate to higher privileges. The vulnerability is ...

CVE-2026-56648

CVE-2026-56648 is a Windows Network File System (NFS) server vulnerability described as a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized attacker to elevate privileges over the network. Public sources identify the root cause as a TOCTOU race in NFS and classify t...

CVE-2026-58546

CVE-2026-58546 is a Windows Remote Desktop Client Information Disclosure vulnerability. The initial and connected records confirm that the issue stems from use of an uninitialized resource in Windows RDP, enabling an unauthorized attacker to disclose information over a network. Affected component...

CVE-2026-58638

CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...

CVE-2026-65784

CVE-2026-65784 describes an out-of-bounds read in the Windows NTFS subsystem that allows an authorized local attacker to disclose information. The CVSS v3.1 base metrics assign a 5.5 (Medium) score with local attack vector , low attack complexity , and low privileges required , with no user inter...

CVE-2025-49757

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2025-53801

CVE-2025-53801 is a Windows DWM core library elevation-of-privilege vulnerability described as an untrusted pointer dereference that enables a locally authenticated attacker to achieve elevation of privileges . The CVE is associated with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vect...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...

CVE-2025-60723

CVE-2025-60723 affects Windows DirectX and is described as a race condition in concurrent execution with a shared resource. The connected documents identify the component as Windows DirectX and list the impact as Denial of Service, indicating an authenticated attacker could induce a network-based...

CVE-2025-62466

CVE-2025-62466 : Windows Client-Side Caching (CSC) Service contains a null pointer dereference vulnerability that allows an authenticated local attacker to escalate privileges . The issue is tied to CSC on Windows and is listed in multiple advisories as a privilege-elevation vulnerability affecti...

CVE-2026-20804

CVE-2026-20804 concerns an issue in Windows Hello where an incorrect privilege assignment can enable a local attacker to tamper with biometric authentication locally. The entry identifies the affected area as Windows Hello and the root cause as a privilege/permission misassignment, resulting in p...

CVE-2026-20810

CVE-2026-20810 affects the Windows Ancillary Function Driver for WinSock. The vulnerability allows an authorized local attacker to elevate privileges due to a memory allocation issue that is not on the heap. The CVE entry shows a local attack vector with high impact (confidentiality, integrity, a...

CVE-2026-32090

CVE-2026-32090 affects the Windows Speech Brokered API. The vulnerability is an Elevation of Privilege with a CVSSv3.1 base score of 7.8 (HIGH). It is a LOCAL, LOW attack complexity, LOW privileges required, with no user interaction and UNCHANGED scope. The impact is HIGH for confidentiality, int...

CVE-2026-40408

CVE-2026-40408 is described as a use-after-free in Windows kernel-mode drivers that enables local privilege escalation for an authenticated attacker. The provided documents consistently state local elevation of privileges but do not specify the affected products, driver components, or vulnerable ...

CVE-2026-45636

The CVE-2026-45636 entries describe a heap-based buffer overflow in Windows NTFS that can allow an unauthenticated attacker to achieve local code execution. Affected software is Windows NTFS (filesystem driver). The underlying cause is a heap-based overflow; impact is high (CVE metrics show Local...

CVE-2026-50300

CVE-2026-50300 is an integer underflow in Windows Kernel (and related Windows components such as DWM Core Library per CVE listings) that enables an authorized local attacker to disclose information. The entry specifies a local attack vector with low privileges and no user interaction, causing a c...