2592 matches found
CVE-2026-50507
CVE-2026-50507 concerns a Protection mechanism failure in Windows BitLocker that allows an unauthorized attacker to bypass a security feature via a physical attack . The connected documents corroborate a vulnerability affecting Windows BitLocker, with a CVSS v3.1 base score of 6.8 (Medium). The a...
CVE-2026-59132
CVE-2026-59132 describes a null pointer dereference in Windows TCP/IP that enables a network-based denial of service by an unauthenticated attacker. Affected component is Windows TCP/IP; root cause is a null pointer dereference leading to denial of service. CVSSv3.1 base score is 7.5 (HIGH) with ...
CVE-2026-61358
The CVE-2026-61358 entry concerns Windows Accessibility Infrastructure (ATBroker.exe) with an improper link resolution before file access (‘link following’) vulnerability that allows an authorized, local attacker to elevate privileges. Reported CVSSv3.1: 7.8 (HIGH) with Local access, Low attack c...
CVE-2026-62788
CVE-2026-62788 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. Impact is high across confidentiality, integrity, and availability; attack vector is local with low privileges required and no user interaction. The provided document...
CVE-2024-49106
CVE-2024-49106 affects Windows Remote Desktop Services and is a remote code execution vulnerability. The connected sources confirm the affected component as Windows Remote Desktop Services, with the CVE listed as CVE-2024-49106 and a high-severity impact. Public documentation from CVE records and...
CVE-2025-21208
CVE-2025-21208 is a Windows RRAS Remote Code Execution vulnerability. The NVD entry confirms the issue as a network‑vector RCE with high impact (CVSSv3.1: 8.8, C/H/I/A = high; AV:N, AC:L, PR:N, UI:R, S:U). The vulnerability is tied to Windows RRAS and has a documented CVE entry; exploitation/avai...
CVE-2025-24066
CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...
CVE-2026-33841
CVE-2026-33841 is a heap-based buffer overflow in the Windows kernel that allows an authorized, local attacker to elevate privileges. Public docs consistently describe the vulnerability as a local privilege escalation in Windows Kernel. The CVE has accompanying CVSSv3.1 metrics indicating local a...
CVE-2026-78445
CVE-2026-78445 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CVSS 9.8 (Critical) with no privileges required and no user interaction. The vulnerability affects the ONCRPC X...
CVE-2026-33834
Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are included here. Monitor for updates from official CVE/NVD entries to obtain concrete exploit info, mitigations, and fixes.
CVE-2026-62732
CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...
CVE-2025-27731
OpenSSH for Windows (CVE-2025-27731) suffers from improper input validation that enables an authorized local attacker to escalate privileges. Affected product: OpenSSH for Windows. Impact: local privilege escalation with high severity (CVE-2025-27731). Documented remediation: Microsoft has releas...
CVE-2025-32712
CVE-2025-32712 is a use-after-free in Windows Win32K GRFX that enables local privilege escalation for an authorized attacker. Connected docs corroborate a GRFX-related privilege-elevation issue associated with Windows components; the NCSC advisory explicitly lists CVE-2025-32712 under Windows Win...
CVE-2026-72982
This is a stack-based buffer overflow in Windows Netlogon that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexity network attack requiring...
CVE-2024-49095
CVE-2024-49095 affects the Windows PrintWorkflowUserSvc with an Elevation of Privilege vulnerability. The entry shows a local attack vector (AV:L), high impact on confidentiality, integrity, and availability (C>I>A), with user interaction not required and a low privilege requirement. The CW...
CVE-2025-24045
CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...
CVE-2025-26675
CVE-2025-26675 is a Windows Subsystem for Linux elevation-of-privilege vulnerability caused by an out-of-bounds read. The issue allows an authorized, local attacker to elevate privileges on affected Windows systems. Public sources in the connected documents confirm the vulnerability and its impac...
CVE-2025-50154
CVE-2025-50154 is a Windows File Explorer spoofing vulnerability where Explorer may disclose NTLMv2-SSP hashes by rendering a remote icon for a .LNK or Library-MS that's hosted on SMB, triggering authentication. Multiple connected documents describe attacker-controlled .LNK/.library-ms payloads a...
CVE-2026-54128
CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...
CVE-2024-43634
CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...
CVE-2025-21213
Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.
CVE-2025-21332
CVE-2025-21332 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The connected data shows a CVSS v3.1 base score of 4.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) indicating a network-accessible issue with low integrity/availability impacts and user interaction require...
CVE-2025-26647
CVE-2025-26647 describes an elevation-of-privilege vulnerability in Windows Kerberos caused by improper input validation, allowing network-based privilege escalation. Affected component: Windows Kerberos in Windows client/server environments. Impact is high (CVSS 3.1: 8.8, Network exploit, Privil...
CVE-2025-27728
CVE-2025-27728 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability caused by an out-of-bounds read. Affects Windows Kernel-Mode Drivers; impact is local privilege escalation with HIGH confidentiality/Integrity/Availability. Microsoft confirmed updates are available (KB5055523) ad...
CVE-2026-23673
Technical details are not publicly provided in the supplied documents. Monitor for updates.
CVE-2025-21303
Technical details are not publicly provided in the supplied documents for CVE-2025-21303 (Windows Telephony Service RCE). Monitor for updates from Microsoft; no specific vulnerable component/version or remediation is described here.
CVE-2025-25008
CVE-2025-25008 describes an elevation-of-privilege in Windows due to improper link resolution before file access (link following). An authorized, local attacker could exploit this to gain higher privileges. CVSSv3.1 base score is 7.1 (High); attack vector LOCAL; privileges required LOW; user inte...
CVE-2025-32710
CVE-2025-32710 refers to a Use-After-Free vulnerability in Windows Remote Desktop Services that allows a network-based attacker to execute code on affected systems. The CVE is linked to Windows RDS components; the Nessus plugin notes it alongside CVE-2025-32715, and an exploit repo exists, but ex...
CVE-2025-33059
CVE-2025-33059 is an information-disclosure vulnerability in Windows Storage Management Provider caused by an out-of-bounds read. An authorized, low-privilege attacker can disclose information locally (CONFIDENTIALITY: HIGH; VECT: LOCAL; IMPACT: NONE on integrity/availability). Affected Microsoft...
CVE-2026-61918
CVE-2026-61918 is a Windows Remote Desktop Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The issue is confirmed in public CVE listings and is associated with the Remote Desktop Client componen...
CVE-2026-68839
CVE-2026-68839 is a heap-based buffer overflow in the Windows USB Mass Storage Class Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CRITICAL with a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-exploitable, no privil...
CVE-2025-26663
CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...
CVE-2025-53778
CVE-2025-53778 is a Windows NTLM elevation-of-privilege flaw caused by improper authentication in NTLM that can enable a network-authenticated attacker with low privileges to elevate to SYSTEM. It is discussed in security reports (e.g., KREBS patch-tuesday coverage) and is addressed by August 202...
CVE-2026-50454
The CVE-2026-50454 entry describes a Privilege Elevation via Relative Path Traversal in Windows User Interface Core. Affected component: Windows User Interface Core; attack requires local access (LOCAL) with LOW privileges and no user interaction per the CVSS v3.1 vector. Impact is Elevation of P...
CVE-2026-20805
CVE-2026-20805 is a local information-disclosure vulnerability in Microsoft Windows Desktop Window Manager (dwm.exe). The provided documents describe that an authenticated, low-privilege user can leak sensitive information via improper handling of ALPC-related structures (ALPC ports/sections) and...
CVE-2026-42976
This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...
CVE-2025-24050
CVE-2025-24050 describes a heap-based buffer overflow in the Windows Hyper-V role that enables a local privilege escalation for an authorized attacker (CVSSv3.1: LOCAL, Privileges Required: LOW, User Interaction: NONE; impact high for confidentiality, integrity, and availability). The connected d...
CVE-2025-27485
CVE-2025-27485 affects Windows Standards-Based Storage Management Service. The issue is uncontrolled resource consumption leading to network-based Denial of Service. CVSS 3.1 shows AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH) with network exploitation and no user interaction required. Con...
CVE-2025-53766
CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...
CVE-2026-40415
Technical details (affected product, component, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2024-49097
CVE-2024-49097 is a Windows Elevation of Privilege affecting the Windows PrintWorkflowUserSvc component. The NC Scadvisory entry assigns CVSS 3.1/7.0 (Local, High attack complexity, Low privileges required, No user interaction; Execution against Confidentiality/Integrity/Availability at High). Co...
CVE-2025-21297
CVE-2025-21297 is a Windows Remote Desktop Services remote code execution vulnerability with CVSS v3.1 base score 8.1 (HIGH). The initial document indicates a network attack vector with no user interaction and high impact on confidentiality, integrity, and availability. Connected sources confirm ...
CVE-2025-27742
CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...
CVE-2026-61352
The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...
CVE-2025-21379
The CVE-2025-21379 issue is in the Windows DHCP Client Service where a remote code execution vulnerability exists. The vulnerability is identified in Microsoft Windows DHCP Client/Server components and is tracked with CVSS v3.1: AV A (adjacent), AC H, PR N, UI R, S U, C H, I H, A H. Public detail...
CVE-2025-24059
CVE-2025-24059 affects Windows Common Log File System Driver. Root cause: incorrect numeric type conversion leading to local privilege escalation. Impact per sources: high (privilege escalation, high confidentiality/integrity/availability impact) with local exploitation and no user interaction re...
CVE-2026-44802
CVE-2026-44802 is a use-after-free in Windows DWM Core Library that enables a local privilege escalation by an authorized user. CVSS 3.1 base score 7.8 (High) with local attack vector, low attack complexity, and require low privileges with no user interaction; impact to confidentiality, integrity...
CVE-2026-50447
CVE-2026-50447 is a Windows Message Queuing (MSMQ) remote-code-execution vulnerability. The issue is a heap-based buffer overflow in MSMQ that could allow an unauthenticated attacker to execute code over the network. Public sources indicate high-severity impact (CVSS v3.1: 9.8, network attack, no...
CVE-2024-43630
CVE-2024-43630 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm it affects Windows kernel components and is characterized by local, low-privilege attack with no user interaction, enabling highest/total impact on confidentiality, integrity, and availability. The ...