CVE-2026-33826

CVE-2026-33826 is a Windows Active Directory (AD DS) Remote Code Execution vulnerability. Connected documents describe an unauthenticated network-based exploit where malformed Kerberos/RPC authentication requests to a Domain Controller trigger memory corruption in LSASS, allowing arbitrary code e...

CVE-2026-33837

CVE-2026-33837 is a heap-based buffer overflow in Windows TCP/IP that could allow an authenticated local attacker to elevate privileges. The entry notes a local, low-attack-complexity vector with no user interaction required and HIGH impact to confidentiality, integrity, and availability, yieldin...

CVE-2026-42911

CVE-2026-42911 describes a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. The issue permits an authorized local attacker to elevate privileges. The documented impact is local privilege elevation with high severity (CVSSv3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H,...

CVE-2026-50300

CVE-2026-50300 is an integer underflow in Windows Kernel (and related Windows components such as DWM Core Library per CVE listings) that enables an authorized local attacker to disclose information. The entry specifies a local attack vector with low privileges and no user interaction, causing a c...

CVE-2026-50346

CVE-2026-50346 is a Windows RPC Runtime-related elevation-of-privilege vulnerability (Netlogon RPC). The primary description indicates improper authorization that allows a locally authenticated attacker to escalate privileges. Public references include the NVD/NCSC entries and the Microsoft updat...

CVE-2026-50386

CVE-2026-50386 refers to a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code locally. The vulnerability affects Windows NTFS components as described in authoritative sources (NVD entry and MSRC update guidance). The exploitation detail in the provided...

CVE-2026-50429

CVE-2026-50429 describes an out-of-bounds read in the Windows Kernel that may allow a remote attacker to disclose information over a network. The entry is tied to Microsoft’s Windows kernel information-disclosure vulnerability with a base CVSSv3.1 score of 8.2 (Network, Low attack complexity, No ...

CVE-2026-50449

CVE-2026-50449 is a Windows Runtime use-after-free vulnerability that allows an authorized, local attacker to escalate privileges. Reported impact is local elevation of privileges with CVSS 3.1/3.1 vector: Local, High severity (7.0). Microsoft has released updates (KB5095051, KB5101649, KB5101650...

CVE-2026-50453

CVE-2026-50453 affects the Windows USB Audio Class driver (usbaudio.sys). It is an out-of-bounds read vulnerability that may disclose information and requires physical access (attack vector: physical, base CVSS 6.1). Root cause: memory read past bounds. Impact: information disclosure with a physi...

CVE-2026-54997

Public technical details are not provided in the supplied documents for CVE-2026-54997. No specifics on affected products, versions, root cause, or remediation are available here. Monitor for updates from official sources.

CVE-2026-58538

CVE-2026-58538 describes a heap-based buffer overflow in the Windows Bluetooth Service that enables an authorized, local attacker to elevate privileges. The vulnerability is evidenced in multiple sources (NVD/NCSC/CIRCL) with consistent wording: heap-based overflow in the Bluetooth service leads ...

CVE-2026-58545

CVE-2026-58545 is a Windows Kernel Security Feature Bypass vulnerability. The connected documents confirm an improper access control in the Windows Kernel that could let an authoriz­ed locally attacker bypass a security feature. Metrics indicate CVSS v3.1 base score 5.5 (Medium), with Local attac...

CVE-2026-58629

CVE-2026-58629 is a Windows DirectX vulnerability described as a use-after-free in the DirectX Graphics Kernel that allows a locally authenticated attacker to elevate privileges. The NVD entry notes a local attack vector with high impact (C/H/I/A all high) and the CVSSv3.1 score of 7.0 (Local, Pr...

CVE-2026-62793

CVE-2026-62793 describes a buffer over-read in Windows NTFS that can allow an authorized local attacker to disclose information. Affected component: Windows NTFS filesystem handling. Root cause: memory over-read leading to confidential data exposure (C: HIGH, I: NONE, A: NONE per CVSS 3.1). Explo...

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...

CVE-2025-47999

CVE-2025-47999 : In Windows Hyper-V, missing synchronization allows an authorized attacker to cause a Denial-of-Service over an adjacent network. The CVSS v3.1 base score is 6.8 (AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Connected documents confirm Hyper-V is affected and describe DoS potential; expl...

CVE-2025-48806

Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.

CVE-2025-48808

Technical details about CVE-2025-48808 are not provided in the connected documents. The materials reference Windows security updates generally but do not specify affected kernel components, versions, or fixes. Monitor official advisories for details.

CVE-2025-49661

Technical details about CVE-2025-49661 (affected product/version, root cause, exploitability, or fix) are not provided in the connected documents; the supplied sources cover Windows KB/security updates but do not describe the CVE specifics.

CVE-2025-49665

Technical details about CVE-2025-49665 are not publicly available in the provided connected documents. The current materials only include a general description and CVSS metrics. Monitor for updates from official advisories.

CVE-2025-49670

Technical details about CVE-2025-49670 (affected software, root cause, impact, and fixes) are not provided in the connected documents; only the initial description is available. Monitor for updates to obtain concrete vulnerability specifics.

CVE-2025-49674

Technical details about CVE-2025-49674 (affected components, root cause, impact or fixes) are not provided in the connected documents. No public exploitation details are included here. Monitor for official updates from Microsoft/NVD for confirmed remediation.

CVE-2025-55223

CVE-2025-55223 involves a race condition in the Graphics Kernel allowing a locally authenticated attacker to elevate privileges. The initial entry notes local privilege elevation via concurrent execution with improper synchronization. Connected documents confirm the CVE-55223 reference in a risk ...

CVE-2025-58738

CVE-2025-58738 is a local-execution vulnerability caused by a use-after-free in Inbox COM Objects. Reported impact: unauthorized code execution on the affected system with local attacker access. Documented impact aligns with high-severity CVSS metrics (AV: Local, AC: High, PR: None, UI: Required;...

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

CVE-2026-20824

CVE-2026-20824 is a Windows Remote Assistance vulnerability described as a protection mechanism failure that enables a local attacker to circumvent a security measure. It is listed with a local attack vector, requiring user interaction, and a high confidentiality impact. Connected sources identif...

CVE-2026-20831

The CVE-2026-20831 entry corresponds to a TOCTOU race condition in Windows Ancillary Function Driver for WinSock that could allow a local, authenticated attacker to elevate privileges. The description in the initial document confirms local privilege escalation as the impact. Connected documents i...

CVE-2026-21238

CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...

CVE-2026-27919

CVE-2026-27919 is a Windows UPnP Device Host elevation-of-privilege vulnerability. It is a local attack with low privileges required and no user interaction, carrying a CVSS v3.1 base score of 7.8 (High). The impact spans confidentiality, integrity, and availability (all High). The exploitation m...

CVE-2026-27922

CVE-2026-27922 is a vulnerability described as a use-after-free in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. The Red Hat/NVD entries confirm the same description. The connected documents do not enumerate affected product v...

CVE-2026-34333

CVE-2026-34333 describes a use-after-free in Windows Win32K GRFX that enables a locally authenticated user to elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction, affecting confidentiality, int...

CVE-2026-40406

Technical details about CVE-2026-40406 are not publicly available in the provided documents; monitor for updates as additional specifics (affected products, root cause, fixes) may be released.

CVE-2026-42914

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-45634

The CVE describes an out-of-bounds read in the Windows DHCP Server that enables an authorized local attacker to disclose information. The affected component is Windows DHCP Server; the root cause is a memory read violation leading to information disclosure. The CVSS metrics indicate a local attac...

CVE-2026-50401

CVE-2026-50401 describes an information disclosure in the Windows Cloud Files Mini Filter Driver due to an out-of-bounds read. The impact is local and depends on the attacker already having some level of privileges, with a high confidentiality impact reported in the CVE; the advisory notes an aut...

CVE-2026-62720

The CVE-2026-62720 entry concerns an integer underflow in Windows DHCP Server that can reveal information to an attacker on an adjacent network. The vulnerability, described as a wrap/wraparound error, enables an unauthenticated attacker to disclose data without user interaction. The CVSS context...

CVE-2026-62797

Technical details about CVE-2026-62797 are not publicly available in the provided documents. The descriptions only note a heap-based buffer overflow in Windows NTFS causing local privilege escalation. Monitor for updates.

CVE-2026-69459

CVE-2026-69459 is a heap-based buffer overflow in the Windows Power Dependency Coordinator that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS v3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege access i...

CVE-2026-69911

CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows a locally authenticated attacker to achieve local privilege escalation . The flaw requires low privileges , high attack complexity , and no user interaction , with unchanged scope and high impac...

CVE-2026-83942

CVE-2026-83942 is a Windows Kernel elevation of privilege vulnerability caused by a missing authorization check , allowing an attacker with low local privileges to gain full control of the system (high impact on confidentiality, integrity, and availability). The vulnerability carries a CVSS 3.1 b...

CVE-2026-83988

CVE-2026-83988 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.8 (High) with low attack complexity, low privileges required, and no user interaction, resulting in high ...

CVE-2025-47986

CVE-2025-47986 : Affected software is the Windows Universal Print Management Service. The vulnerability is a use-after-free in that service, enabling an authorized attacker to achieve local privilege escalation. The CVE has a high impact (8.8/10) with local, privilege-related execution and a chan...

CVE-2025-49680

CVE-2025-49680 affects the Windows Performance Recorder component. Root cause: improper link resolution before file access ("link following"). Impact: local Denial-of-Service by an authenticated user. Public details in connected documents confirm the vulnerability type and affected component, wit...

CVE-2025-55236

Technical details for CVE-2025-55236 are not provided in the connected documents. Monitor for updates (no vendor/version/root-cause/fix details in the supplied sources).

CVE-2025-59200

CVE-2025-59200 describes a race-condition vulnerability in the Data Sharing Service Client where concurrent access to a shared resource allows an unauthorized local attacker to spoof locally. The CVE entry states a base CVSS v3.1 score of 7.7 ( HIGH ), with LOCAL attack vector, LOW confidentialit...

CVE-2025-60715

Technical details about CVE-2025-60715 (RRAS heap overflow, affected components, fixes) are not provided in the connected documents. Public technical specifics, affected versions, and remediation steps are not disclosed here; monitor for official updates.

CVE-2026-20810

CVE-2026-20810 affects the Windows Ancillary Function Driver for WinSock. The vulnerability allows an authorized local attacker to elevate privileges due to a memory allocation issue that is not on the heap. The CVE entry shows a local attack vector with high impact (confidentiality, integrity, a...

CVE-2026-20834

CVE-2026-20834 affects Windows Shell (Windows Shell component) with a spoofing impact described in the Windows Shell entry: ability to pretend to be another user (CVSS v3.1 base 4.6; AV:P, AC:L, PR:N, UI:N, S:U, C:H, I:N, A:N). Connected docs corroborate a Windows Shell vulnerability tied to CVE-...

CVE-2026-20844

CVE-2026-20844 is a Windows Clipboard Server use-after-free vulnerability that enables local privilege escalation. The linked Nessus/NVD/CVE data confirm the affected component is Windows Clipboard Server and that successful exploitation yields elevation of privileges. The issue is being addresse...

CVE-2026-32068

CVE-2026-32068 impacts Windows SSDP service, enabling local elevation of privilege via the Simple Search and Discovery Protocol. The issue is local, requires low privileges, and does not require user interaction. CVSS v3.1 base score 7.0 (HIGH) with HIGH impact on confidentiality, integrity, and ...