CVE-2026-57087

CVE-2026-57087 is a Windows Media Foundation remote code execution vulnerability caused by a heap-based buffer overflow in Windows Media Foundation. An unauthenticated attacker could trigger code execution over a network. Public sources confirm the flaw affects Windows Media/Media Foundation comp...

CVE-2026-32164

CVE-2026-32164 describes a race condition in Windows User Interface Core that can allow an authorized local attacker to elevate privileges. Technical details in the connected advisories confirm the flaw is a Windows UI Core race condition and that Microsoft has released security updates to fix it...

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-42912

The CVE-2026-42912 entry concerns a race condition in the Windows Telephony Service caused by improper synchronization. A local, low-privilege attacker could exploit this vulnerability to elevate privileges on the host (CVSSv3.1: 7.0, HIGH). Affected component: Windows Telephony Service. Root cau...

CVE-2026-45596

The CVE-2026-45596 entry concerns a use-after-free in the Windows Ancillary Function Driver for WinSock, leading to local privilege elevation. Affected component/function is the Windows AFD for WinSock; root cause is a use-after-free condition that can be exploited by an authorized local attacker...

CVE-2026-50334

CVE-2026-50334 is a Windows Push Notifications/Windows Notification information disclosure vulnerability. The NVD description states an unauthorized local actor could disclose sensitive information. The CIRCL seen entries corroborate a Windows notification component issue with multiple advisories...

CVE-2026-50390

CVE-2026-50390 is a Windows Kernel elevation-of-privilege in which an authorized attacker can gain local privileges through a type-confusion vulnerability (incompatible resource type). The CVE is documented with a CVSSv3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, BASE SCORE 7.0 (HIGH). Affe...

CVE-2026-50402

CVE-2026-50402 targets Windows NTFS with an elevation-of-privilege flaw caused by incorrect numeric-type conversion. A locally authenticated attacker could exploit this to gain system privileges. The CVE is documented with a High severity (CVSS 3.1: 7.8, Local, Privilege Escalation, no user inter...

CVE-2026-50497

CVE-2026-50497 is an off-by-one error in Windows Remote Desktop Protocol that allows an unauthenticated network attacker to disclose information. Public sources in the provided documents identify the affected component as RDP and describe a network-triggered information disclosure, without detail...

CVE-2026-56173

CVE-2026-56173 is a use-after-free vulnerability in Windows WebView that allows an authorized local attacker to escalate privileges. The issue is tied to the Windows WebView component and is listed with a high impact (local elevation of privileges) in the CVE entry. Connected sources corroborate ...

CVE-2026-57096

CVE-2026-57096 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that allows an authorized attacker to elevate privileges locally. The CVSSv3.1 base score is 7.8 (HIGH). Exploitation details are not provided beyond local privilege escalati...

CVE-2026-62725

CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...

CVE-2025-50152

CVE-2025-50152 is a Windows Kernel vulnerability (Out-of-bounds read) that could enable an authorized local attacker to elevate privileges. The initial record lists the CVE with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL attack vector/low complexity, with no exploitation details. Connected do...

CVE-2025-50163

CVE-2025-50163 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that enables remote code execution over the network. Exploitation is network-based (AV:N) with low attack complexity, no privileges required, but user interaction is required...

CVE-2025-53723

CVE-2025-53723 : Numeric truncation error in Windows Hyper-V allows an authorized, local attacker to elevate privileges. The entry is confirmed to affect the Windows Hyper-V component, with impact described as local privilege escalation and high confidentiality/integrity/availability effects in t...

CVE-2025-53797

CVE-2025-53797 is a Windows RRAS information disclosure vulnerability caused by a buffer over-read in RRAS. The CVE description notes a network-exposed flaw that could allow an unauthorized attacker to disclose information, with a CVSS3.1 base score of 6.5 (Network attack vector, no privileges, u...

CVE-2025-54895

CVE-2025-54895 : Integer overflow or wraparound in Windows SPNEGO Extended Negotiation can let an authorized, locally authenticated attacker elevate privileges. The connected documents confirm the vulnerability in the Windows SPNEGO Extended Negotiation path and indicate the impact as local privi...

CVE-2025-55331

CVE-2025-55331: Use-after-free in Windows PrintWorkflowUserSvc that allows a locally authenticated user to escalate privileges. Connected advisories indicate Microsoft released October 2025 security updates (e.g., KB5066835 and related KBs) addressing Windows print/cryptography components; apply ...

CVE-2025-59208

CVE-2025-59208 is an out-of-bounds read in Windows MapUrlToZone that could allow an unauthenticated attacker to disclose information over a network. The description and connected documents confirm a network-based exposure affecting Windows, with the root cause being a memory read beyond bounds in...

CVE-2025-59278

CVE-2025-59278 affects Windows Authentication Methods and is tied to an improper validation of input type, enabling local privilege escalation for an authorized user. The CVE is rated with CVSS v3.1 base metrics around 7.8 (HIGH) by Microsoft/CNA sources, indicating a local, high-severity impact ...

CVE-2025-60716

CVE-2025-60716 : A use-after-free in Windows DirectX can enable an authorized local attacker to elevate privileges. The affected component is Windows DirectX; root cause is a use-after-free flaw. Impact is local privilege escalation with high potential impact. The provided connected documents do ...

CVE-2025-62464

CVE-2025-62464 is a Windows Projected File System Elevation of Privilege vulnerability (buffer over-read) that could allow an authorized local attacker to gain higher privileges. Affected product: Windows Projected File System (ProjFS) components; root cause described as a buffer over-read in Pro...

CVE-2026-20930

CVE-2026-20930 – Windows Management Services Elevation of Privilege is a confirmed issue: a race condition due to improper synchronization in Windows Management Services can allow an authorized local attacker to elevate privileges. The concurrent-execution flaw affects Windows Management Services...

CVE-2026-24295

CVE-2026-24295 concerns the Windows Device Association Service Elevation of Privilege. The entry indicates a LOCAL attack with LOW privileges required and NO user interaction, leading to HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH). The vulne...

CVE-2026-26160

CVE-2026-26160 affects the Windows Remote Desktop Licensing Service. The issue arises from missing authentication for a critical function, enabling an authorized local attacker to elevate privileges on affected systems. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, lo...

CVE-2026-26173

CVE-2026-26173 affects the Windows Ancillary Function Driver for WinSock and is described as a race-condition vulnerability in a shared-resource path that can allow an authenticated local attacker to elevate privileges to SYSTEM. The connected sources confirm this is a Windows elevation-of-privil...

CVE-2026-26177

Technical details about CVE-2026-26177 are not provided in the supplied documents. Monitor for updates from Microsoft and the CVE record.

CVE-2026-27930

CVE-2026-27930 is a Windows GDI information disclosure vulnerability. The CVSSv3.1 base score is 5.5 (Medium); attack is LOCAL, requires user interaction, and does not affect integrity or availability, but threatens confidentiality HIGH. The record notes an OFFICIAL_FIX remediation level, implyin...

CVE-2026-32088

CVE-2026-32088 describes a security feature bypass in the Windows Biometric Service. Affected component: Windows Biometric Framework service on Windows. The underlying root cause is not explicitly detailed in the provided documents. CVSS metrics indicate an attacker with physical access can explo...

CVE-2026-49175

CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...

CVE-2026-50339

CVE-2026-50339 is a Windows Push Notifications information-disclosure vulnerability. It allows a low-privilege, local attacker with no user interaction to disclose sensitive data locally. Affected software is Windows Push Notifications; CVSS v3.1 base score 5.5 (Medium). Microsoft has released up...

CVE-2026-50378

CVE-2026-50378 is a Windows Key Guard elevation-of-privilege vulnerability caused by a race condition in a shared resource that allows a local attacker to elevate privileges. The connected sources confirm the issue and that Microsoft released updates (e.g., KB5101649 and MSRC advisories) to addre...

CVE-2026-50410

CVE-2026-50410 is a Windows Runtime use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. Multiple connected sources confirm the issue affecting Windows Runtime and describe local privilege escalation as the impact, with CVSS v3.1 score of 7.0 (HIGH) and L...

CVE-2026-50437

CVE-2026-50437 describes an out-of-bounds read in Windows DWM Core Library that could allow an authenticated local attacker to disclose information. Public docs identify the affected component (Windows DWM Core Library) and the impact (local information disclosure) with a CVSSv3.1 base score of 5...

CVE-2026-50492

CVE-2026-50492 describes a heap-based buffer overflow in the Windows Resilient File System (ReFS) that allows an unauthorized attacker to achieve remote code execution with a physical attack. The connected sources corroborate ReFS as the affected component and frame the impact as remote code exec...

CVE-2026-50495

CVE-2026-50495 is a Windows DNS vulnerability described as improper access control that could allow an authorized local attacker to tamper DNS-related data. Multiple connected sources (NVD entry and MSRC update guidance) confirm this as a locally exploitable issue with a baseline CVSS v3.1 score ...

CVE-2026-54107

The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...

CVE-2026-56194

CVE-2026-56194 : Heap-based buffer overflow in Windows Network File System (NFS) can allow an authorized attacker to elevate privileges over a network. Affected component is Windows NFS Server; root cause described as a heap-based overflow in the NFS networking path. The CVE entry indicates privi...

CVE-2025-24052

CVE-2025-24052 concerns vulnerabilities in the Agere modem driver (ltmdm64.sys) shipped with Windows. The connected Microsoft KBs confirm that the ltmdm64.sys driver is removed in October 2025 updates, and that fax-modem hardware relying on this driver will no longer function on Windows after the...

CVE-2025-53725

Technical details about CVE-2025-53725 are not provided in the connected documents. Public exposure, affected components, and fixes are not described here; monitor for updates.

CVE-2025-53802

Technical details about CVE-2025-53802 (affected components, root cause, versions, exploitability, and fixes) are not publicly provided in the supplied connected documents. Monitor for updates from Microsoft advisories and MSRC for remediation specifics.

CVE-2025-54096

CVE-2025-54096 : Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthenticated network attacker to disclose information. The vulnerability is characterized by network access (AV:N) with low complexity (AC:L) and no privileges required (PR:N), but requires user i...

CVE-2025-54116

CVE-2025-54116 affects Windows MultiPoint Services with Improper access control that enables local privilege escalation by an authorized user. CVSS 3.1 base score 7.3 (Local, Privilege Required Low, User Interaction Required, High Confidentiality/Integrity/Availability impact). The Connected docu...

CVE-2025-54894

CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.

CVE-2025-54912

CVE-2025-54912 is described as a use-after-free vulnerability in Windows BitLocker that enables local privilege escalation by an authorized attacker. The connected NC SC document confirms the vulnerability is associated with Windows BitLocker and indicates the impact as elevated privileges, but d...

CVE-2025-55226

Technical details about CVE-2025-55226 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and Vulners for affected products, versions, and fixes once details are published.

CVE-2025-55692

Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.

CVE-2025-58722

CVE-2025-58722 is a heap-based buffer overflow in Windows DWM that could enable a locally authenticated attacker to elevate privileges. The available connected documents confirm the affected component (Windows DWM) and the local privilege elevation impact, but do not provide concrete exploit deta...

CVE-2025-59203

CVE-2025-59203 affects the Windows StateRepository API. The issue is described as an insertion of sensitive information into a log file, enabling local disclosure by an authenticated attacker with local access. The CVSS v3.1 base score is 5.5 (Medium) with Local attack vector and Low attack compl...