CVE-2025-53141

CVE-2025-53141 refers to a null pointer dereference in the Windows Ancillary Function Driver for WinSock that can enable local privilege escalation for an authenticated user. The connected Windows-ecosystem data identifies this CVE as affecting the WinSock ancillary driver with a high base severi...

CVE-2025-55225

CVE-2025-55225 affects Windows Routing and Remote Access Service (RRAS). The vulnerability is an out-of-bounds read that enables an unauthenticated, remote attacker to disclose information over the network. In the connected NCSC document, RRAS entries list CVE-2025-55225 with impact: Access to se...

CVE-2025-58730

The CVE-2025-58730 entry is corroborated by connected sources as a local code-execution via a use-after-free in Inbox COM Objects. The KB/MSKB documents listed do not provide vendor/version specifics or a public fix; public details in EUVD-2025-34313/ NCSC-2025-0310 reiterate the issue abstractly...

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

CVE-2025-59289

CVE-2025-59289 concerns a double-free condition in Windows Bluetooth Service enabling a locally authenticated attacker to elevate privileges. Public sources within the provided documents confirm this CVE is associated with the Windows Bluetooth Service and is categorized with a high impact (local...

CVE-2025-60709

Technical details (affected product/version, root cause, impact, exploit specifics) are not publicly provided in the given documents for CVE-2025-60709. Monitor for updates from Microsoft; no additional vulnerability specifics are available here.

CVE-2025-60720

Technical details for CVE-2025-60720 (TDX.sys) are not provided in the Connected documents. The Initial Description notes local privilege escalation via a buffer over-read; no vendor/version/patch details are supplied here; monitor for updates.

CVE-2025-62473

CVE-2025-62473 is a Windows RRAS information-disclosure vulnerability caused by a buffer over-read. It enables an unauthenticated attacker to disclose information over the network. Connected sources confirm affected component as Windows Routing and Remote Access Service (RRAS) and label the vulne...

CVE-2026-20814

CVE-2026-20814 is a local privilege-escalation in the Microsoft Graphics Kernel caused by a race condition when accessing a shared resource. An authorized local attacker could elevate privileges on affected Windows systems. The issue is documented in multiple sources (e.g., CVE lists and ENISA EU...

CVE-2026-20828

CVE-2026-20828 is an out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS). The impact is information disclosure and requires physical access (attack vector: PHYSICAL; base score 4.6). Affected: Windows ICS component within Windows. Root cause: out-of-bounds read as descri...

CVE-2026-20858

CVE-2026-20858 is a Windows Management Services use-after-free local privilege escalation (high risk, CVSS 7.8). Connected documents confirm it affects Windows Management Services and is tracked in Microsoft’s January 2026 security updates (e.g., KB5073379/KB5073457). Remediation is via the poste...

CVE-2026-20867

CVE-2026-20867 describes a race-condition in Windows Management Services caused by concurrent execution over a shared resource with improper synchronization. This vulnerability enables a locally authenticated attacker to elevate privileges. The issue is addressed in Microsoft’s January 2026 secur...

CVE-2026-20872

CVE-2026-20872 affects Windows NTLM: external control of a file name or path allows an attacker to spoof authentication over the network. The description states this vulnerability and related references indicate a Windows NTLM spoofing risk. The connected Nessus/NCSC/EUVD/NVD entries confirm the ...

CVE-2026-21244

CVE-2026-21244 affects Windows Hyper-V with a heap-based buffer overflow that enables local code execution by an authenticated attacker. The CVSS 3.1 vector ( LOCAL, LOW PR, LOW AC, USER INTERACTION REQUIRED, S: U ) indicates high impact to confidentiality, integrity, and availability if exploite...

CVE-2026-26169

CVE-2026-26169 is a Windows Kernel Memory information-disclosure vulnerability described as a buffer over-read that can leak information to an authorized local attacker. The CVE is listed across multiple feeds (NVD/NCSC/EUVD) with the impact described as local information disclosure and a high co...

CVE-2026-32080

CVE-2026-32080 affects Windows WalletService and is a use-after-free that enables local privilege escalation for an authenticated user. The initial sources and connected advisories confirm impact on Windows WalletService with local execution and privilege elevation. Microsoft has published securi...

CVE-2026-50335

CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...

CVE-2026-50346

CVE-2026-50346 is a Windows RPC Runtime-related elevation-of-privilege vulnerability (Netlogon RPC). The primary description indicates improper authorization that allows a locally authenticated attacker to escalate privileges. Public references include the NVD/NCSC entries and the Microsoft updat...

CVE-2026-50375

CVE-2026-50375 is a Windows DirectX Graphics Kernel elevation-of-privilege vulnerability. The issue stems from a heap-based buffer overflow in DirectX, allowing an authorized attacker to locally elevate privileges. Affected component: Windows DirectX/DirectX Graphics Kernel (dxgkrnl). Current doc...

CVE-2026-50450

CVE-2026-50450 describes a race condition in Windows Wireless Wide Area Network Service where concurrent execution on a shared resource with improper synchronization can allow an authenticated, local attacker to elevate privileges. The CVE is associated with a local exploit vector and a base CVSS...

CVE-2026-50453

CVE-2026-50453 affects the Windows USB Audio Class driver (usbaudio.sys). It is an out-of-bounds read vulnerability that may disclose information and requires physical access (attack vector: physical, base CVSS 6.1). Root cause: memory read past bounds. Impact: information disclosure with a physi...

CVE-2026-50479

CVE-2026-50479 affects the Windows USB Hub Driver via an untrusted pointer dereference, enabling local privilege escalation for an authenticated user. Public sources confirm this vulnerability and Microsoft has released a security update to address it (MSRC vulnerability page). The entry is corro...

CVE-2026-54122

CVE-2026-54122 describes a heap-based buffer overflow in Windows GDI+ that enables local code execution by an unauthenticated attacker. The vulnerability affects the Windows GDI+ component and is rated high (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.4). The available documents confirm the ...

CVE-2026-54983

The CVE-2026-54983 entry concerns a stack-based buffer overflow in Active Directory Federation Services (AD FS) that allows an unauthenticated, network-based attacker to trigger a denial of service. The authoritative sources describe the vulnerability as enabling network-ported DoS without requir...

CVE-2026-55003

CVE-2026-55003 affects Windows Remote Desktop Protocol (RDP). The vulnerability arises from a use of an uninitialized resource, enabling an unauthenticated attacker to disclose information over the network. The CVSS 3.1 Base score is 6.5 (Medium); attack vector: Network, privileges required: None...

CVE-2026-56182

CVE-2026-56182 is a Windows NTFS elevation-of-privilege vulnerability caused by an integer overflow/wraparound in NTFS operations that can be exploited by an authorized local attacker. Public sources in the connected data corroborate the root cause and the affected component is NTFS on Windows. T...

CVE-2026-57083

CVE-2026-57083 : A vulnerability in the Windows Codecs Library (Windows Media Photo Codec) arises from use of an uninitialized resource, enabling a local attacker to disclose information. Documented impact is local information disclosure with a CVSS 3.1/5.5 (Local, Privileges NONE, User Interacti...

CVE-2026-57088

CVE-2026-57088 is an Elevation of Privilege vulnerability in the Extensible Storage Engine (ESENT). Multiple connected sources confirm improper access control allowing an authorized local attacker to escalate privileges. CVSS 3.1 vectors indicate Local Access, Low Privilege required, with High co...

CVE-2025-50157

CVE-2025-50157 affects Windows Routing and Remote Access Service (RRAS) with an information disclosure due to use of an uninitialized resource. The base CVSS v3.1 score is 5.7 (Network, Low attack complexity, Privileges Required: Low, User Interaction: Required; Confidentiality Impact: High). Mic...

CVE-2025-50159

CVE-2025-50159 : Use-after-free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS can enable an authorized local user to escalate privileges. CVSS v3.1 base score 7.3 (LOCAL, LOW complexity, LOW privileges, USER interaction required; confidentiality/integrity/availability High). Affected com...

CVE-2025-50164

CVE-2025-50164 is a Windows RRAS vulnerability described as a heap-based buffer overflow in Routing and Remote Access Service. It enables an authorized attacker to execute code over the network (attack vector: network; authentication: low; user interaction required). The CVSS 3.1 basis in the ini...

CVE-2025-53151

CVE-2025-53151 is a Windows Kernel use-after-free local privilege escalation vulnerability. Connected sources indicate the affected component is the Windows Kernel and that exploitation leads to obtaining elevated privileges locally. Microsoft security updates are referenced in the surrounding ad...

CVE-2025-53154

CVE-2025-53154 concerns the Windows Ancillary Function Driver for WinSock and describes a null pointer dereference that enables a local, authorized user to achieve privilege escalation. The CVSSv3.1 metrics cited by Microsoft indicate a local attack vector, low attack complexity, and required pri...

CVE-2025-54098

Technical details about CVE-2025-54098 (Hyper-V local privilege elevation) are not provided in the connected documents. Monitor for future updates from Microsoft for affected products, impact, and mitigations.

CVE-2025-58731

CVE-2025-58731 is an Inbox COM Objects use-after-free vulnerability. The connected EUVD entry ( inbox COM Objects ) and CVE records identify the issue as enabling local code execution by an unauthenticated attacker who can trigger the use-after-free condition. Public references point to Microsoft...

CVE-2025-58738

CVE-2025-58738 is a local-execution vulnerability caused by a use-after-free in Inbox COM Objects. Reported impact: unauthorized code execution on the affected system with local attacker access. Documented impact aligns with high-severity CVSS metrics (AV: Local, AC: High, PR: None, UI: Required;...

CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

CVE-2026-20928

CVE-2026-20928 affects Windows Recovery Environment Agent. Root cause: improper removal of sensitive information before storage/transfer. Impact: allows bypass of a security feature with physical access; confidentiality is impacted. Affected product: Windows Recovery Environment Agent component. ...

CVE-2026-21236

CVE-2026-21236 describes a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock (AFD) that enables an authenticated local attacker to obtain elevated privileges. The vulnerability is categorized as a local, privilege-escalation issue, with the affected component being t...

CVE-2026-25169

Technical details about CVE-2026-25169 are not provided in the supplied documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.

CVE-2026-26167

CVE-2026-26167 affects Windows Push Notification Core. The vulnerability is a race condition from improper synchronization of a shared resource, enabling a locally authenticated attacker to elevate privileges. IT guidance from the April 2026 Patch Tuesday indicates this EoP issue is among the cri...

CVE-2026-32081

Technical details (affected products, vulnerable components, root cause, exploits, or remediation) are not provided in the supplied documents; monitor for updates from Microsoft.

CVE-2026-32218

CVE-2026-32218 is a Windows Kernel information-disclosure vulnerability described as the insertion of sensitive information into a log file, enabling a locally authenticated attacker to disclose data. The CVE is listed in multiple sources (NVD/NCSC/CIRCL/Attackerkb) with an impact category of sen...

CVE-2026-34349

CVE-2026-34349 describes a local information disclosure in Windows Media where sensitive data is exposed to an unauthorized actor, potentially enabling a local attacker with low privileges and no user interaction to disclose information. The report notes a CVSSv3.1 base score of 5.5 (Medium), wit...

CVE-2026-45594

CVE-2026-45594 : This vulnerability concerns the Windows Application Identity (AppID) Subsystem , where an exposure of sensitive information to an unauthorized actor enables a local attacker to disclose information. The NVD entry reiterates the issue as a local confidentiality breach (impact: Hig...

CVE-2026-49783

CVE-2026-49783 is a Windows Secure Boot issue described as an improperly implemented security check for the standard, enabling a local attacker with low privileges to bypass a security feature. The CVSS v3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, no user interac...

CVE-2026-49795

CVE-2026-49795 is a use-after-free in the Windows Kernel that allows an authorized local attacker to elevate privileges. Affected: Windows kernel code paths implementing kernel objects referenced after free. Root cause: use-after-free leads to arbitrary code execution with SYSTEM privileges; impa...

CVE-2026-50400

CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...

CVE-2026-50459

CVE-2026-50459 is a Windows Kernel elevation of privilege vulnerability described as a use-after-free in the Windows kernel that could allow a local attacker to elevate privileges. Public references in the connected documents indicate Microsoft has released updates to address this vulnerability (...

CVE-2026-50477

CVE-2026-50477 is a Windows Kernel elevation-of-privilege vulnerability caused by a heap-based buffer overflow. The issue allows an authenticated local attacker to elevate privileges on affected systems. Public disclosures identify the vulnerability in the Windows Kernel, with CVSS v3.1 base scor...