CVE-2025-49725

Technical details beyond the short CVE description are not provided in the supplied documents. No product/version/patch specifics, exploit details, or remediation steps are available. Monitor official Microsoft advisories for patched versions and remediation guidance.

CVE-2026-20842

CVE-2026-20842 is a Windows elevation-of-privilege vulnerability in the Desktop Window Manager (DWM) due to a use-after-free in the DWM core library. Exploitation would be local (requiring prior authentication) and could grant total compromise of the affected system, as described in the CVE entry...

CVE-2026-20926

CVE-2026-20926 describes a race condition in the Windows SMB Server that allows an authorized network attacker to elevate privileges. The vulnerability affects Windows SMB Server components and is tied to concurrent execution on a shared resource with improper synchronization. Mitigation is via M...

CVE-2026-24294

CVE-2026-24294 affects Windows SMB Server. The core issue is improper authentication in the SMB component, enabling an authorized local attacker to elevate privileges. The CVE is rated high (CVSS 3.1 base 7.8) with local attack vector, low complexity, and no user interaction required, and the imp...

CVE-2026-32074

CVE-2026-32074 concerns the Windows Projected File System (ProjFS) Elevation of Privilege. The vulnerability is local: attack vector Local, requires LOW privileges, with LOW attack complexity and no user interaction. It impacts confidentiality, integrity, and availability (all HIGH). The CVSS 3.1...

CVE-2026-32181

The CVE-2026-32181 entry describes a Denial of Service vulnerability in the Connected User Experiences and Telemetry Service. According to the metrics, it is a LOCAL, low-complexity attack requiring LOW privileges with no user interaction, and it can cause an availability impact (CVSSv3.1 base sc...

CVE-2026-32209

Technical details (affected components, exploit vectors, root cause, vulnerable versions, and fixes) are not publicly provided in the supplied documents. Monitor official updates from NVD/CVE for further information.

CVE-2026-35422

Technical details for CVE-2026-35422 (affected components, root cause, impact, or patch) are not provided in the connected documents. Monitor for authoritative updates from official sources.

CVE-2026-50332

CVE-2026-50332 is a Windows Kernel elevation-of-privilege vulnerability described as a heap-based buffer overflow that can be exploited locally by an authorized user. Public sources in the connected documents confirm the issue affects Windows Kernel and note the CVE’s inclusion among July 2026 pa...

CVE-2026-58532

CVE-2026-58532 is a Windows Kernel elevation-of-privilege vulnerability: integer overflow/wraparound in the kernel could allow a local attacker to escalate privileges. Connected sources (NVD, EUVD/ENISA, CIRCL sightings) corroborate Windows Kernel impact and references to Microsoft security updat...

CVE-2026-59137

Technical details about CVE-2026-59137 are not publicly provided in the supplied documents. No affected products, versions, or remediation are specified here. Monitor for updates from official sources.

CVE-2025-47982

CVE-2025-47982 affects Windows Storage VSP Driver. The root cause is improper input validation, enabling a locally authenticated attacker to elevate privileges. CVSS v3.1 base score 7.8 (HIGH) with local, low-complexity, no user interaction required; impact includes high confidentiality, integrit...

CVE-2025-48818

CVE-2025-48818 is a TOCTOU race condition in Windows BitLocker that enables bypass of a security feature via physical access. The CVE is listed in NCSC/NCSC-2025-0213 with impact described as bypassing security measures under Windows BitLocker and a CVSS v3.1 base score of 6.8 (PHYSICAL vector, L...

CVE-2025-55231

CVE-2025-55231 describes a race condition in the Windows Storage-based Management Service where concurrent access to a shared resource is improperly synchronized, enabling a network-based attacker to potentially execute code. Affected component: Windows Storage-based Management Service (Windows S...

CVE-2026-20871

CVE-2026-20871 refers to a Desktop Window Manager (dwm.exe) use-after-free vulnerability that enables local privilege escalation to SYSTEM. The connected exploit report and advisories describe a DWM-related attack path (Visual‑Field Singularity) affecting the DWM compositor, with PoC/claims of in...

CVE-2026-20918

Technical details about CVE-2026-20918 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.

CVE-2026-32162

CVE-2026-32162 is a Windows COM elevation of privilege vulnerability with local access, no user interaction, and high impact to confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.4 (HIGH) with exploit code maturity labeled UNPROVEN and remediation level OFFICIAL_FIX. Affec...

CVE-2026-44799

This CVE (CVE-2026-44799) describes a heap-based buffer overflow in the Remote Desktop Client that allows an unauthorized attacker to execute code remotely over a network . The connected records corroborate a network-based, remote code execution vulnerability affecting the Remote Desktop Client, ...

CVE-2026-45639

The CVE-2026-45639 entry relates to an out-of-bounds read in Windows Remote Desktop Protocol (RDP). The underlying issue enables an unauthenticated, network-based attacker to disclose information over the network without user interaction. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:...

CVE-2026-50444

CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...

CVE-2026-50690

CVE-2026-50690 is a Windows SMB information-disclosure vulnerability described as caused by the use of an uninitialized resource within Windows SMB that can allow an authorized local attacker to disclose information. The CVE is linked to Microsoft advisories and MSRC updates addressing the issue,...

CVE-2026-62754

CVE-2026-62754 describes a heap-based buffer overflow in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation. The flaw is triggered within the Kerberos-related code path, enabling elevation of privileges on the affected system. The available documents confirm...

CVE-2026-65796

CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution . A heap-based buffer overflow in the Windows iSCSI Target Service is the underlying vulnerability, enabling an unauthenticated attacker to execute code remotely over the network. Public sources consistently describe this as a rem...

CVE-2025-49671

CVE-2025-49671 affects Windows Routing and Remote Access Service (RRAS). The RRAS entry shows an issue enabling an unauthorized network attacker to access sensitive data (Confidentiality impact HIGH). CVSSv3.1 metrics (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) yield base score 6.5 (MEDIUM). The Connec...

CVE-2025-49682

CVE-2025-49682 is a Windows Media use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. The published entries confirm a local-privilege-escalation impact without remote code execution. Microsoft has released updates (e.g., KB 5062570/5062572/5062552–506...

CVE-2025-49686

Technical details for CVE-2025-49686 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are confirmed here. Monitor for official updates from Microsoft and CVE references.

CVE-2025-53789

CVE-2025-53789 affects Windows StateRepository API where missing authentication enables local privilege escalation. The NCSC advisory references this CVE with CVSS 3.1/7.8 (High) and impact described as escalating privileges. No explicit affected product/version details or fix/remediation are pro...

CVE-2025-54913

CVE-2025-54913 affects Windows UI XAML Maps MapControlSettings. It is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to locally elevate privileges. Reported CVSS base score ~7.8 (HIGH) with LOCAL attack vector...

CVE-2025-64679

CVE-2025-64679 is a heap-based buffer overflow in Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. The NCSC advisory and CVE listings confirm this affects Windows DWM Core Library and is tracked under CVE-2025-64679 with a high-severity impact (local,...

CVE-2026-42913

The CVE-2026-42913 entry describes a heap-based buffer overflow in the Remote Desktop Client leading to remote code execution over a network with High severity (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected component is the Remote Desktop Client; underlying cause is a heap-based overfl...

CVE-2026-45603

The vulnerability CVE-2026-45603 affects Windows’ Ancillary Function Driver for WinSock (AFD). The issue is a use-after-free in the WinSock-related driver, leading to local privilege escalation for an authorized attacker. The CVSS3.1 assessment shows HIGH impact with LOCAL access, HIGH confidenti...

CVE-2026-61936

CVE-2026-61936 describes a local security bypass in the Windows Defender Firewall Service where missing authorization allows an authorized attacker to bypass a security feature locally. The NVD entry and CVE records corroborate this description. According to the provided metrics, the impact is hi...

CVE-2026-62692

CVE-2026-62692 : Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 vector is LOCAL, LOW exploitability with NONE user interaction and impact on Confidentiality, Integrity, Availability (HIGH) ; base sco...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62752

CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...

CVE-2026-65662

CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...

CVE-2025-47991

CVE-2025-47991 maps to a Microsoft IME (Input Method Editor) use-after-free vulnerability reported as a resource-management error that can enable local privilege escalation. Connected CNVD-2025-16874 corroborates an IME privilege-elevation risk from Microsoft IME. Publicly stated impact in the CV...

CVE-2025-48804

CVE-2025-48804 : Windows BitLocker is affected by a security feature bypass through acceptance of extraneous untrusted data with trusted data, enabling a physical attacker to bypass protections. The connected Microsoft-related documents indicate that Microsoft released security updates addressing...

CVE-2025-48815

CVE-2025-48815 affects Windows OS via a type confusion in the SSDP Service that could allow an authorized local attacker to elevate privileges. The description states local privilege escalation with high impact (CVSSv3.1: 7.8, HIGH). No explicit exploitation details or vendor/product versions are...

CVE-2025-49659

Technical details for CVE-2025-49659 are not present in the provided connected documents. Public information about affected products, root cause, exploit status, and fixes is not available here; monitor for updates from official advisories.

CVE-2025-49742

Technical details about CVE-2025-49742 are not provided in the supplied documents. No information on affected products, root cause, impact, or fixes is available here; monitor for updates.

CVE-2025-53137

CVE-2025-53137 affects Windows' Ancillary Function Driver for WinSock. It is a use-after-free vulnerability that can lead to local privilege escalation when exploited by an authenticated attacker. The connected documents confirm the affected component and the high-severity impact (local, with ele...

CVE-2025-58726

CVE-2025-58726 affects Windows SMB Server with improper access control that enables an authenticated network attacker to elevate privileges. The issue is network-exploitable, requires low privileges, and has high impact on confidentiality, integrity, and availability. Microsoft and OS security up...

CVE-2026-20936

CVE-2026-20936 is an information-disclosure vulnerability in Windows NDIS (network data path). The issue is an out-of-bounds read in the NDIS driver that could allow an authorized attacker with physical access to disclose data. In the Nessus/NCSC/NVD entries, the CVE is flagged under Windows NDIS...

CVE-2026-26165

CVE-2026-26165 is a Windows Shell elevation-of-privilege vulnerability. The record shows local access required (attack vector: LOCAL), with low privileges required and no user interaction, and maintains the same security scope. The impact is high on confidentiality, integrity, and availability, w...

CVE-2026-26180

CVE-2026-26180 is a Windows kernel local elevation of privilege issue. The vulnerability affects the Windows kernel with a local attacker able to gain HIGH impact on confidentiality, integrity, and availability. Exploitation is LOCAL with LOW complexity and LOW privileges required, and no user in...

CVE-2026-27928

CVE-2026-27928 is a Windows Hello security feature bypass vulnerability. The initial sources describe improper input validation in Windows Hello that allows an unauthenticated attacker to bypass a security feature over a network (attack vector: network; user interaction: none). The CVSS 3.1 base ...

CVE-2026-35418

CVE-2026-35418 – Summary : Use-after-free in Windows Cloud Files Mini Filter Driver allows an authorized local attacker to elevate privileges. The CVE entry is supported by NVD/EUVD/CVE records describing a local, privilege-escalation vulnerability with a high CVSS v3.1 score (7.8; LOCAL, LOW att...

CVE-2026-44805

CVE-2026-44805: Use-after-free in Windows Network Controller (NC) Host Agent enables an authorized local attacker to cause denial of service. Affected component is the Windows Network Controller Host Agent; underlying cause is use-after-free. CVSSv3.1 base score 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I...

CVE-2026-45638

CVE-2026-45638 relates to Windows’ Ancillary Function Driver for WinSock and is due to a use-after-free in that driver. This vulnerability allows an authorized attacker to escalate privileges locally. The available documents specify the affected component and the local-privilege-escalation impact...