CVE-2026-50505

CVE-2026-50505 is a Windows Message Queuing (MSMQ) remote code execution vulnerability described as a use-after-free in MSMQ that could allow an authorized attacker to execute code over a network. Public sources (MSRC update guidance) confirm updates addressing this issue and advise applying the ...

CVE-2026-56194

CVE-2026-56194 : Heap-based buffer overflow in Windows Network File System (NFS) can allow an authorized attacker to elevate privileges over a network. Affected component is Windows NFS Server; root cause described as a heap-based overflow in the NFS networking path. The CVE entry indicates privi...

CVE-2026-57087

CVE-2026-57087 is a Windows Media Foundation remote code execution vulnerability caused by a heap-based buffer overflow in Windows Media Foundation. An unauthenticated attacker could trigger code execution over a network. Public sources confirm the flaw affects Windows Media/Media Foundation comp...

CVE-2026-57976

The CVE-2026-57976 entry concerns Windows Active Directory Domain Services and is triggered by a null pointer dereference that can cause a denial of service over the network by an authorized attacker. The NVD entry corroborates a CVSS v3.1 base score of 6.5 (Medium), with NETWORK attack vector, L...

CVE-2026-57982

CVE-2026-57982 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by the use of an uninitialized resource. An authenticated attacker could disclose information over the network. Public details identify the affected component as Windows RDP/RDP client-server int...

CVE-2026-58541

CVE-2026-58541 — Windows DWM Core Library Elevation of Privilege due to a type confusion in DWM. Affected component: Windows DWM Core Library/DWM (Windows OS). Description from sources: Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to e...

CVE-2026-65776

CVE-2026-65776 : Use-after-free in Windows Win32K enables local privilege escalation for an authorized user. Affected component: Win32k. Root cause: use-after-free vulnerability leading to arbitrary code execution with HIGH impact on confidentiality, integrity, and availability. CVSSv3.1: AV:L/AC...

CVE-2025-53156

CVE-2025-53156 is a Windows Storage Port Driver information disclosure vulnerability. The affected component is the Windows Storage Port Driver, with an impact of exposing sensitive data to a local, authorized attacker. The CVSS 3.1 base metrics indicate a Local attack with Low attack complexity ...

CVE-2025-53722

CVE-2025-53722 affects Windows Remote Desktop Services. Described as Denial-of-Service via uncontrolled resource consumption, exploitable over the network with no user interaction and no privileges required. CVSS v3.1 base score 7.5 (Network, Low attack complexity, No privileges, No user interact...

CVE-2025-53725

Technical details about CVE-2025-53725 are not provided in the connected documents. Public exposure, affected components, and fixes are not described here; monitor for updates.

CVE-2025-53797

CVE-2025-53797 is a Windows RRAS information disclosure vulnerability caused by a buffer over-read in RRAS. The CVE description notes a network-exposed flaw that could allow an unauthorized attacker to disclose information, with a CVSS3.1 base score of 6.5 (Network attack vector, no privileges, u...

CVE-2025-53802

Technical details about CVE-2025-53802 (affected components, root cause, versions, exploitability, and fixes) are not publicly provided in the supplied connected documents. Monitor for updates from Microsoft advisories and MSRC for remediation specifics.

CVE-2025-54106

CVE-2025-54106 affects Windows Routing and Remote Access Service (RRAS) with an integer overflow/wraparound vulnerability that enables remote code execution over the network (CVSSv3.1: 8.8). A GitHub exploit proof-of-concept exists: Exploit for Integer Overflow or Wraparound in Microsoft RRAS, in...

CVE-2025-54894

CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.

CVE-2025-54912

CVE-2025-54912 is described as a use-after-free vulnerability in Windows BitLocker that enables local privilege escalation by an authorized attacker. The connected NC SC document confirms the vulnerability is associated with Windows BitLocker and indicates the impact as elevated privileges, but d...

CVE-2025-55331

CVE-2025-55331: Use-after-free in Windows PrintWorkflowUserSvc that allows a locally authenticated user to escalate privileges. Connected advisories indicate Microsoft released October 2025 security updates (e.g., KB5066835 and related KBs) addressing Windows print/cryptography components; apply ...

CVE-2025-55338

CVE-2025-55338 is associated with Windows BitLocker and is described as a ROM-patching deficiency that could allow circumvention of a security feature via a physical attack. Connected documents reference Windows BitLocker entries including CVE-2025-55338 in MSKB/brief vulnerability lists, noting ...

CVE-2025-58734

CVE-2025-58734 is described as a use-after-free vulnerability in the Windows Inbox COM Objects that can allow a local attacker to achieve arbitrary code execution. The connected document from CNVD confirms that Inbox COM Objects contain a code execution vulnerability, supporting the CVE’s impact ...

CVE-2025-59195

CVE-2025-59195 describes a race condition in the Microsoft Graphics Component caused by concurrent execution on a shared resource, enabling an authorized attacker to cause a local Denial of Service. The connected documents confirm the vulnerability in the Graphics Component and note that updates ...

CVE-2025-59259

CVE-2025-59259 affects Windows Local Session Manager (LSM) with an improper validation of input type, enabling an unauthenticated? authorized user to cause Denial of Service over a network. According to the CVE description and EUVD-2025-34370, the exploitability is network-based (AV:N, AC:L, PR:L...

CVE-2025-59290

CVE-2025-59290 is a local privilege escalation caused by a use-after-free in Windows Bluetooth Service. Affected component: Windows Bluetooth Service. Root cause: use-after-free. Impact: an authorized attacker can elevate privileges locally. Exploitation status is not specified in the provided do...

CVE-2025-62461

CVE-2025-62461 is a Windows Projected File System Filter Driver elevation-of-privilege vulnerability caused by a buffer over-read. It allows an authorized local attacker to elevate privileges. Public sources (NCSC/NVD-style listings) assign a CVSS v3.1 base score of 7.8 (High) with Local attack v...

CVE-2026-20825

CVE-2026-20825 is a Windows Hyper-V information-disclosure vulnerability described as “improper access control” that can allow an authorized local attacker to disclose information. The CVE is rated with local attack vector, high privilege requirement, and high confidentiality impact (CVSS: 4.4, M...

CVE-2026-20925

CVE-2026-20925 affects Windows NTLM and is described as an external control of the file name or path that enables spoofing (pretend to be another user) over a network. The vulnerability is assigned a CVSS v3.1 base score of 6.5 (Medium) with network attack vector and required user interaction. Co...

CVE-2026-21240

CVE-2026-21240 describes a local, authenticated TOCTOU race in Windows HTTP.sys that can allow privilege escalation. Affected component: Windows HTTP.sys. Root cause: time-of-check/time-of-use race condition. Impact: high (local escalation of privileges, potential confidentiality, integrity, and ...

CVE-2026-32076

CVE-2026-32076 describes an out-of-bounds read in the Windows Storage Spaces Controller that enables an authorized local attacker to elevate privileges. The vulnerability is tied to the Storage Spaces Controller component and is documented across multiple sources (NVD/NVD-affiliated listings, Red...

CVE-2026-32088

CVE-2026-32088 describes a security feature bypass in the Windows Biometric Service. Affected component: Windows Biometric Framework service on Windows. The underlying root cause is not explicitly detailed in the provided documents. CVSS metrics indicate an attacker with physical access can explo...

CVE-2026-32212

CVE-2026-32212 refers to a Universal Plug and Play information disclosure in upnp.dll. The CVSSv3.1 base score is 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction. Impact is confined to confidentiality (HIGH) with no integrity/availabi...

CVE-2026-34328

CVE-2026-34328 describes an information-disclosure issue in Windows Audio Service, allowing a local attacker with low privileges to disclose sensitive information. Affected: Windows Audio Service (Windows). Root cause details are not provided beyond the high-level description. CVSS v3.1 base scor...

CVE-2026-49804

CVE-2026-49804 describes a heap-based buffer overflow in the Windows USB Video Driver that can allow an unauthorized attacker to elevate privileges via a physical attack. The vulnerability is characterized by a physical attack vector with low exploit complexity and the need for user interaction, ...

CVE-2026-50303

CVE-2026-50303 describes a vulnerability in Windows Key Guard where use of a cryptographic primitive with a risky implementation enables an authorized local attacker to bypass a security feature. Affected component: Windows Key Guard cryptographic handling; root cause: risky implementation of the...

CVE-2026-50308

CVE-2026-50308 is a Windows NTFS vulnerability described as an integer underflow (wrap or wraparound) that could allow an unauthorized attacker to execute code locally. Sources consistently state: affected component is Windows NTFS on Windows systems; impact is local code execution with high seve...

CVE-2026-50341

CVE-2026-50341 is a Windows NTFS information-disclosure issue caused by a buffer over-read. The vulnerability allows an authorized local attacker to disclose information from memory. Public documentation in connected sources confirms the affected component as NTFS and describes a local-exploitati...

CVE-2026-50389

CVE-2026-50389 affects Windows File Explorer and is a local information-disclosure vulnerability where an authorized attacker can disclose sensitive information. The issue is confirmed in Windows File Explorer (Explorer.exe) and is addressed by Microsoft security updates; multiple MSRC/MSKB entri...

CVE-2026-50436

CVE-2026-50436 is a Windows Kernel local privilege escalation caused by a use-after-free vulnerability. Updates from Microsoft (e.g., KB5095051) address the issue; the CVSS vector indicates local access, low attack complexity, low privileges required, with high impact on confidentiality, integrit...

CVE-2026-50685

CVE-2026-50685 is a Windows DHCP Server Remote Code Execution vulnerability caused by a double-free in the DHCP Server component. It is network-exploitable (no user interaction) and rated by Microsoft as an in-scope issue with high impact (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; CVSS v3.1 base 7.5)....

CVE-2026-50695

CVE-2026-50695 refers to a stack-based buffer overflow in Microsoft Windows Active Directory Federation Services (AD FS) that enables an unauthenticated, remote attacker to cause a denial of service over the network. The vulnerability is described with a CVSS v3.1 base score of 7.5 (HIGH) with at...

CVE-2026-54129

Technical details (affected product/version, root cause, exploit vector, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-61933

CVE-2026-61933 describes an out-of-bounds read in the Windows DWM Core Library that can allow a locally authorized attacker to disclose information. The CVE entry, with a CVSSv3.1 base score of 5.5 (Medium) and local access requiring low privileges and no user interaction, indicates impact is con...

CVE-2025-48004

CVE-2025-48004 is a local privilege elevation in Microsoft Brokering File System caused by a use-after-free bug. The vulnerability allows an authenticated local attacker to escalate privileges. Public disclosures identify the affected component as the Microsoft Brokering File System, with CVSS-li...

CVE-2025-53138

CVE-2025-53138 affects Windows Routing and Remote Access Service (RRAS). The issue is caused by use of an uninitialized resource, enabling an authorized network attacker to disclose information over the network. The connected RRAS entries corroborate that this CVE is present and assign a CVSS v3....

CVE-2025-53143

CVE-2025-53143 is listed for Windows Message Queuing with high impact (CVSS 3.1: 8.8, Network, Privileges Low, User Interaction None). The entry indicates a remote code execution potential via resource type confusion. Connected sources confirm the vulnerability exists in MSMQ and note a network-e...

CVE-2025-53724

CVE-2025-53724 is a Windows Push Notifications vulnerability described as a type confusion that allows an authorized, locally authenticated attacker to elevate privileges. The CVE is linked to Windows Push Notifications and is rated with a base score of 7.8 (HIGH) via CVSS 3.1, with attack vector...

CVE-2025-53807

CVE-2025-53807 describes a race condition in the Microsoft Graphics Component that allows local privilege escalation. The NCSC document confirms CVE-2025-53807 under Windows-related vulnerabilities. The CVSS3.1 vector from the initial document indicates a Local attack vector, High impact on confi...

CVE-2025-53810

CVE-2025-53810 describes a type confusion vulnerability in Windows Defender Firewall Service that allows an authorized local attacker to escalate privileges. The connected NC SC/ENISA-style document confirms the affected component as Windows Defender Firewall Service and lists the impact as obtai...

CVE-2025-54096

CVE-2025-54096 : Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthenticated network attacker to disclose information. The vulnerability is characterized by network access (AV:N) with low complexity (AC:L) and no privileges required (PR:N), but requires user i...

CVE-2025-55688

CVE-2025-55688 is a Windows Privilege Escalation vulnerability affecting the Windows PrintWorkflowUserSvc. The issue is described as a use-after-free in PrintWorkflowUserSvc that can allow an authorized local attacker to elevate privileges. The practical impact is local elevation of privileges wi...

CVE-2025-55693

CVE-2025-55693 is a Windows Kernel elevation-of-privilege vulnerability caused by a use-after-free in the Windows Kernel. It allows a local attacker to escalate privileges. Public exploits exist per connected advisories, and Microsoft has released updates (MSRC) to fix the issue; apply the corres...

CVE-2025-58735

CVE-2025-58735 is a Use-after-free vulnerability in Inbox COM Objects leading to local code execution. The base CVSS v3.1 score is 7.0 (HIGH) with LOCAL attackVector, HIGH impact on confidentiality/integrity/availability, and user interaction required. Connected MSKB/NCSC entries confirm a Window...

CVE-2025-59207

CVE-2025-59207 is an elevation-of-privilege vulnerability in the Windows Kernel caused by an untrusted pointer dereference, enabling a locally authenticated attacker to elevate privileges. The Initial Description confirms the vulnerability type and impact. The Connected Documents provide Windows-...