CVE-2026-56194

CVE-2026-56194 : Heap-based buffer overflow in Windows Network File System (NFS) can allow an authorized attacker to elevate privileges over a network. Affected component is Windows NFS Server; root cause described as a heap-based overflow in the NFS networking path. The CVE entry indicates privi...

CVE-2026-50431

Technical details are not publicly available in the provided documents. Monitor updates from Microsoft (MSRC) and advisories (NCSC, ZDI) for affected products, impact, and remediation related to CVE-2026-50431.

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

CVE-2026-62724

CVE-2026-62724 is a local privilege escalation affecting the Windows Telephony Service due to a use-after-free. An authorized attacker can elevate privileges locally. Root cause: use-after-free in Telephony service code; impact: high (local elevation of rights) per CVSS 3.1; exploitability and ex...

CVE-2026-69459

CVE-2026-69459 is a heap-based buffer overflow in the Windows Power Dependency Coordinator that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS v3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege access i...

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...

CVE-2025-47975

Technical details about CVE-2025-47975 are not publicly provided in the connected documents. The available sources do not describe affected products/versions, root cause specifics, impact beyond the general privilege escalation claim, or fixes. Monitor for updates.

CVE-2025-47999

CVE-2025-47999 : In Windows Hyper-V, missing synchronization allows an authorized attacker to cause a Denial-of-Service over an adjacent network. The CVSS v3.1 base score is 6.8 (AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Connected documents confirm Hyper-V is affected and describe DoS potential; expl...

CVE-2025-48820

CVE-2025-48820 affects Windows AppX Deployment Service. It stems from improper link resolution before file access ("link following"), allowing an authenticated local attacker to elevate privileges. CVSS v3.1 score 7.8 (LOCAL, LOW privileges required, high confidentiality/integrity/availability im...

CVE-2025-49668

Technical details for CVE-2025-49668 are not publicly provided in the supplied connected documents. No product/version/root-cause/mitigation is specified here. Monitor for updates from Microsoft and the CVE entry for further specifics.

CVE-2025-49670

Technical details about CVE-2025-49670 (affected software, root cause, impact, and fixes) are not provided in the connected documents; only the initial description is available. Monitor for updates to obtain concrete vulnerability specifics.

CVE-2025-53144

CVE-2025-53144 is a Windows Message Queuing (MSMQ) remote code execution vulnerability caused by a type confusion flaw in MSMQ. The issue allows an attacker to execute code over the network on a affected Windows host when MSMQ is reachable; CVSSv3.1 indicates AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H w...

CVE-2025-58717

Technical details (affected product/component/version/root cause/mitigation) for CVE-2025-58717 are not disclosed in the provided connected documents. Monitor official advisories (e.g., MSRC/KB updates) for remediation and version-specific guidance.

CVE-2025-59201

CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...

CVE-2025-62466

CVE-2025-62466 : Windows Client-Side Caching (CSC) Service contains a null pointer dereference vulnerability that allows an authenticated local attacker to escalate privileges . The issue is tied to CSC on Windows and is listed in multiple advisories as a privilege-elevation vulnerability affecti...

CVE-2026-20839

CVE-2026-20839 : Improper access control in the Windows Client-Side Caching (CSC) Service may allow an authorized local attacker to disclose information. The CVSSv3.1 vector indicates a local attack with low complexity and low privileges required, but with high confidentiality impact (C:H, I:N, A...

CVE-2026-20919

CVE-2026-20919 is a race-condition vulnerability in Windows SMB Server that allows an authorized network attacker to elevate privileges. The issue concerns concurrent access to a shared resource without proper synchronization. Public documentation in the connected sources confirms Windows SMB Ser...

CVE-2026-21238

CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...

CVE-2026-23674

CVE-2026-23674 relates to Windows MapUrlToZone: improper resolution of path equivalence allows a network-based bypass of a security feature. Affected component is the MapUrlToZone path resolution logic in Windows, with exploitation possible over the network and no user interaction required beyond...

CVE-2026-25188

CVE-2026-25188 is a Windows Telephony Service heap-based buffer overflow that allows an attacker on an adjacent network to elevate privileges. The CVE entry cites an adjacent-network attack vector, low exploit complexity, and no user interaction, with high impact on confidentiality, integrity, an...

CVE-2026-26183

CVE-2026-26183 involves the Remote Access Management service/API (RPC server). According to the provided metrics, the vulnerability enables local Elevation of Privilege with a Low attack complexity and Low privileges required, and no user interaction. The impact is High for confidentiality, integ...

CVE-2026-32068

CVE-2026-32068 impacts Windows SSDP service, enabling local elevation of privilege via the Simple Search and Discovery Protocol. The issue is local, requires low privileges, and does not require user interaction. CVSS v3.1 base score 7.0 (HIGH) with HIGH impact on confidentiality, integrity, and ...

CVE-2026-32170

Technical details for CVE-2026-32170 are not publicly available in the provided documents beyond the basic description. No vendor, product, version, root cause, impact, or fix specifics are supplied here. Monitor official disclosures and CVE/Microsoft update guidance for updates.

CVE-2026-40406

Technical details about CVE-2026-40406 are not publicly available in the provided documents; monitor for updates as additional specifics (affected products, root cause, fixes) may be released.

CVE-2026-42911

CVE-2026-42911 describes a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. The issue permits an authorized local attacker to elevate privileges. The documented impact is local privilege elevation with high severity (CVSSv3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H,...

CVE-2026-50300

CVE-2026-50300 is an integer underflow in Windows Kernel (and related Windows components such as DWM Core Library per CVE listings) that enables an authorized local attacker to disclose information. The entry specifies a local attack vector with low privileges and no user interaction, causing a c...

CVE-2026-50346

CVE-2026-50346 is a Windows RPC Runtime-related elevation-of-privilege vulnerability (Netlogon RPC). The primary description indicates improper authorization that allows a locally authenticated attacker to escalate privileges. Public references include the NVD/NCSC entries and the Microsoft updat...

CVE-2026-50386

CVE-2026-50386 refers to a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code locally. The vulnerability affects Windows NTFS components as described in authoritative sources (NVD entry and MSRC update guidance). The exploitation detail in the provided...

CVE-2026-50449

CVE-2026-50449 is a Windows Runtime use-after-free vulnerability that allows an authorized, local attacker to escalate privileges. Reported impact is local elevation of privileges with CVSS 3.1/3.1 vector: Local, High severity (7.0). Microsoft has released updates (KB5095051, KB5101649, KB5101650...

CVE-2026-50453

CVE-2026-50453 affects the Windows USB Audio Class driver (usbaudio.sys). It is an out-of-bounds read vulnerability that may disclose information and requires physical access (attack vector: physical, base CVSS 6.1). Root cause: memory read past bounds. Impact: information disclosure with a physi...

CVE-2026-50473

CVE-2026-50473 is a Windows File Explorer information-disclosure vulnerability. The available sources indicate that an unauthorized actor could locally disclose sensitive information via Windows File Explorer, with the CVSS vector showing local access and low privileges required. The root cause a...

CVE-2026-54997

Public technical details are not provided in the supplied documents for CVE-2026-54997. No specifics on affected products, versions, root cause, or remediation are available here. Monitor for updates from official sources.

CVE-2026-58538

CVE-2026-58538 describes a heap-based buffer overflow in the Windows Bluetooth Service that enables an authorized, local attacker to elevate privileges. The vulnerability is evidenced in multiple sources (NVD/NCSC/CIRCL) with consistent wording: heap-based overflow in the Bluetooth service leads ...

CVE-2026-58545

CVE-2026-58545 is a Windows Kernel Security Feature Bypass vulnerability. The connected documents confirm an improper access control in the Windows Kernel that could let an authoriz­ed locally attacker bypass a security feature. Metrics indicate CVSS v3.1 base score 5.5 (Medium), with Local attac...

CVE-2026-58629

CVE-2026-58629 is a Windows DirectX vulnerability described as a use-after-free in the DirectX Graphics Kernel that allows a locally authenticated attacker to elevate privileges. The NVD entry notes a local attack vector with high impact (C/H/I/A all high) and the CVSSv3.1 score of 7.0 (Local, Pr...

CVE-2026-62793

CVE-2026-62793 describes a buffer over-read in Windows NTFS that can allow an authorized local attacker to disclose information. Affected component: Windows NTFS filesystem handling. Root cause: memory over-read leading to confidential data exposure (C: HIGH, I: NONE, A: NONE per CVSS 3.1). Explo...

CVE-2026-83942

CVE-2026-83942 is a Windows Kernel elevation of privilege vulnerability caused by a missing authorization check , allowing an attacker with low local privileges to gain full control of the system (high impact on confidentiality, integrity, and availability). The vulnerability carries a CVSS 3.1 b...

CVE-2025-48806

Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.

CVE-2025-49665

Technical details about CVE-2025-49665 are not publicly available in the provided connected documents. The current materials only include a general description and CVSS metrics. Monitor for updates from official advisories.

CVE-2025-49674

Technical details about CVE-2025-49674 (affected components, root cause, impact or fixes) are not provided in the connected documents. No public exploitation details are included here. Monitor for official updates from Microsoft/NVD for confirmed remediation.

CVE-2025-49680

CVE-2025-49680 affects the Windows Performance Recorder component. Root cause: improper link resolution before file access ("link following"). Impact: local Denial-of-Service by an authenticated user. Public details in connected documents confirm the vulnerability type and affected component, wit...

CVE-2025-50177

CVE-2025-50177 affects Windows Message Queuing (MSMQ) with a use-after-free in the MSMQ path that enables remote code execution over a network. Affected: Windows MSMQ component. Impact per CVSS: high (8.1) with network access, no user interaction required. Exploitation as of the connected documen...

CVE-2025-53145

CVE-2025-53145 is tracked as a Windows Message Queuing (MSMQ) remote code execution vulnerability. The connected data list it under Windows MSMQ with impact: Execute code (high severity, CVSS ~8.8/10) and references indicate MSMQ-related fixes were shipped in August 2025 security updates (KBs and...

CVE-2025-54094

CVE-2025-54094 is a local privilege escalation in the Windows Defender Firewall Service caused by a type confusion vulnerability. The connected documents confirm the affected component as Windows Defender Firewall Service and the impact as obtaining elevated privileges on the local machine. The s...

CVE-2025-55223

CVE-2025-55223 involves a race condition in the Graphics Kernel allowing a locally authenticated attacker to elevate privileges. The initial entry notes local privilege elevation via concurrent execution with improper synchronization. Connected documents confirm the CVE-55223 reference in a risk ...

CVE-2025-55236

Technical details for CVE-2025-55236 are not provided in the connected documents. Monitor for updates (no vendor/version/root-cause/fix details in the supplied sources).

CVE-2025-58738

CVE-2025-58738 is a local-execution vulnerability caused by a use-after-free in Inbox COM Objects. Reported impact: unauthorized code execution on the affected system with local attacker access. Documented impact aligns with high-severity CVSS metrics (AV: Local, AC: High, PR: None, UI: Required;...

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

CVE-2025-59278

CVE-2025-59278 affects Windows Authentication Methods and is tied to an improper validation of input type, enabling local privilege escalation for an authorized user. The CVE is rated with CVSS v3.1 base metrics around 7.8 (HIGH) by Microsoft/CNA sources, indicating a local, high-severity impact ...

CVE-2026-20810

CVE-2026-20810 affects the Windows Ancillary Function Driver for WinSock. The vulnerability allows an authorized local attacker to elevate privileges due to a memory allocation issue that is not on the heap. The CVE entry shows a local attack vector with high impact (confidentiality, integrity, a...