CVE-2025-21339

CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...

CVE-2025-26634

CVE-2025-26634 describes a heap-based buffer overflow in Windows Core Messaging that could allow an unauthenticated? not; authorized attacker to elevate privileges over a network. The CVE entry lists a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality/i...

CVE-2025-27467

CVE-2025-27467 affects Windows Digital Media, with a use-after-free flaw that enables local privilege escalation for an authenticated user with low privileges and no user interaction. The CVSS 3.1 base metrics provided by Microsoft indicate AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.8 (HIG...

CVE-2025-33056

CVE-2025-33056 affects Microsoft Local Security Authority Server (lsasrv). The provided documents identify the issue as improper access control that enables a remote attacker to cause a denial of service over the network. The NCSC advisory explicitly lists this CVE under Windows LSASS with a CVSS...

CVE-2026-33827

CVE-2026-33827 is a Windows TCP/IP race-condition vulnerability in the IPv6/IPSec processing path (tcpip.sys) that enables remote code execution. Exploitation described in connected docs requires sending crafted IPv6 packets (with IPSec) to Windows hosts with IPSec enabled; no authentication or u...

CVE-2026-50507

CVE-2026-50507 concerns a Protection mechanism failure in Windows BitLocker that allows an unauthorized attacker to bypass a security feature via a physical attack . The connected documents corroborate a vulnerability affecting Windows BitLocker, with a CVSS v3.1 base score of 6.8 (Medium). The a...

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-21306

CVE-2025-21306 corresponds to a remote code execution vulnerability in Windows Telephony Service. The issue is mapped to Windows Telephony Service and is rated high (CVSSv3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm the affected component and vulnerability type; root ...

CVE-2025-21367

CVE-2025-21367 targets the Windows Win32 Kernel subsystem with a local elevation-of-privilege flaw. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with local access, low attack complexity, and privileges required, and the impact to confidentiality, integrity, and availability as HIGH. C...

CVE-2025-21411

Technical details about CVE-2025-21411 are not provided in the connected documents. Public sources reference Windows Telephony Service Remote Code Execution, but this dataset contains no product/version/root-cause/fix specifics. Monitor for updates from MSRC and NVD.

CVE-2025-29841

CVE-2025-29841 involves a race condition in the Windows Universal Print Management Service, where concurrent access to a shared resource with improper synchronization can allow an authorized local attacker to elevate privileges. The CVE is rated with a base score of 7.0 (HIGH) and local attack ve...

CVE-2025-29969

Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.

CVE-2025-33068

CVE-2025-33068 is a denial-of-service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption. The issue can be triggered over the network to degrade or disrupt service. Microsoft has released security updates addressing this family of issue...

CVE-2024-49087

CVE-2024-49087 affects the Windows Mobile Broadband Driver in Windows. It is an information-disclosure vulnerability in the Mobile Broadband component, with CVSS v3.1 base score 4.6 (AV: Physical, AC: Low, PR: None, UI: None, S: Unchanged; C: High, I: None, A: None). Exploitation requires physica...

CVE-2024-49110

CVE-2024-49110 is listed in the Windows Mobile Broadband driver category as a privilege-escalation vulnerability. It is described with a CVSS v3.1 base score of 6.8 (medium), with physical access as attack vector, no user interaction, and impact to confidentiality, integrity, and availability rat...

CVE-2025-21321

CVE-2025-21321 refers to a Windows Kernel Memory Information Disclosure vulnerability. Documentation confirms it affects Windows kernel memory and was addressed by January 2025 security updates (e.g., KB5050009, KB5050021, KB5049984, KB5049981, KB5049993). The CVSS shows local access with low pri...

CVE-2025-21323

Technical details about CVE-2025-21323 are not publicly available in provided connected documents. Records confirm the CVE exists and is linked to Windows Kernel Memory Information Disclosure, but no affected products, versions, root cause, or fixes are described here. Monitor updates.

CVE-2025-33075

CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...

CVE-2026-20856

CVE-2026-20856 is a Windows Server Update Services (WSUS) remote code execution vulnerability caused by improper input validation. Exploitation is possible over a network with no user interaction; CVSSv3.1 base score 8.1 (High). Public references note this is addressed by January 2026 security up...

CVE-2026-26179

Technical details about CVE-2026-26179 are not provided in the available documents; no product/version specifics or exploit information are disclosed. Monitor for updates.

CVE-2026-42989

Winlogon Elevation of Privilege (CVE-2026-42989) is caused by improper link resolution before file access ("link following"). This vulnerability allows an authorized, local attacker to gain higher privileges. Affected: Winlogon component on Windows; impact is local privilege escalation with a CVS...

CVE-2024-49078

Technical details about CVE-2024-49078 are not publicly available in the provided documents. Monitor for updates from Microsoft and CVE feeds for affected components, root cause, and remediation.

CVE-2024-49103

CVE-2024-49103 affects Windows Wireless Wide Area Network Service (WwanSvc). It is an information disclosure vulnerability with CVSS 3.1 (AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N); attacker needs physical access (per the vector). The connected documents confirm the vulnerability description but do not...

CVE-2025-21193

CVE-2025-21193 concerns Active Directory Federation Services (AD FS) spoofing. The connected documents identify the vulnerability as enabling a malicious actor to impersonate another user via AD FS, with a CVSS v3.1 base score of 6.5 (Network attack, short of user interaction, high confidentialit...

CVE-2025-21220

CVE-2025-21220 is a Microsoft Message Queuing information disclosure vulnerability that has concrete public details in multiple connected sources: the CVE is listed as affecting Windows Message Queuing with the impact described as “Accessing Sensitive Data” and a CVSS basis of 7.5 (HIGH) indicati...

CVE-2025-21350

CVE-2025-21350 is a Windows Kerberos Denial-of-Service vulnerability. Connected sources indicate the issue affects Windows Kerberos with a CVSSv3.1 base score of 5.9 (Network, High impact on availability; no confidentiality/integrity impact). The connected documents confirm Microsoft has released...

CVE-2025-29959

Technical details about CVE-2025-29959 are not publicly available in the provided connected documents. The initial description notes a RRAS uninitialized resource issue, but no product/version/root-cause/fix specifics are present here; monitor official advisories for updates.

CVE-2025-30388

Technical details about CVE-2025-30388 are not provided in the connected documents. Public information remains limited to the initial description. Monitor for updates from official advisories for affected products, impacts, and remediation.

CVE-2025-47973

Technical details about CVE-2025-47973 are not publicly disclosed in the provided documents. No affected products, root cause, or remediation are described here. Monitor for updates from the sources.

CVE-2026-26151

CVE-2026-26151 describes insufficient UI warnings in Windows Remote Desktop that can enable a network attacker to spoof a remote session. The NVD entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network access, no privileges required, user interaction required, and impact to confidentiality ...

CVE-2026-32073

CVE-2026-32073 refers to a Local Privilege Escalation in the Windows Ancillary Function Driver for WinSock. The advisory notes a local attack vector with high impact (C:H/I:H/A:H) and a low-privilege, no-user-interaction requirement, under CVSS 3.1: base score 7.0, attack vector Local, attack com...

CVE-2026-47652

The CVE-2026-47652 entry concerns a Windows Hyper-V component vulnerability described as an out-of-bounds read that can yield local code execution by an unauthorized attacker. Public sources indicate the flaw affects Windows Hyper-V, with an attack vector that is Local and requires High privilege...

CVE-2025-21249

Technical details for CVE-2025-21249 are not publicly available in the provided documents; no affected products, root cause, or remediation are stated here. Monitor for official updates from Microsoft and CVE databases.

CVE-2025-32724

CVE-2025-32724 affects Windows Local Security Authority Subsystem Service (LSASS). The connected NC SC advisory and MS security-update artifacts identify this as a Denial-of-Service vulnerability with CVSS v3.1 base score 7.5 (NETWORK, LOW complexity, NONE privileges, NONE user interaction) and s...

CVE-2025-33055

CVE-2025-33055 is an information-disclosure vulnerability: an out-of-bounds read in Windows Storage Management Provider could allow an authorized, local attacker to disclose information. Connected sources confirm the flaw and impact but do not provide concrete exploit details or a documented reme...

CVE-2025-53778

CVE-2025-53778 is a Windows NTLM elevation-of-privilege flaw caused by improper authentication in NTLM that can enable a network-authenticated attacker with low privileges to elevate to SYSTEM. It is discussed in security reports (e.g., KREBS patch-tuesday coverage) and is addressed by August 202...

CVE-2025-21182

CVE-2025-21182 is a Windows ReFS Deduplication Service elevation of privilege vulnerability. The connected MSRC/MSKB advisories confirm a local-elevation flaw in the ReFS Deduplication component, with exploitation requiring local access and no user interaction. CVSS metrics show local access, hig...

CVE-2025-21218

CVE-2025-21218 is cataloged as a Windows Kerberos Denial of Service vulnerability with CVSS 3.1, base score 7.5 (HIGH). The description and connected sources confirm the issue is a DoS affecting Windows Kerberos, but the provided documents do not specify affected product versions, root cause deta...

CVE-2025-21301

CVE-2025-21301 is a Windows Geolocation Service Information Disclosure vulnerability with CVSS 3.1 base score 6.5 (Network attack, Low attack complexity, Privileges required: Low, User interaction: None). The vulnerability is disclosed as affecting Windows Geolocation Service and is addressed by ...

CVE-2025-29833

Technical details for CVE-2025-29833 are not provided in the connected documents. The EUVD and MSKB entries cover other issues and updates, but none specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2025-29964

CVE-2025-29964 is a Windows Media heap-based buffer overflow that allows a network-exploiting attacker to execute code remotely. The connected NCSC advisory lists this CVE under Windows Media with a high risk score (8.80) and confirms an exploitable path labeled as “Execute random code.” The avai...

CVE-2025-48822

CVE-2025-48822 is an out-of-bounds read vulnerability in Windows Hyper-V that could enable local code execution. The connected NCSC entry explicitly lists the impact as Execution of arbitrary code on Windows Hyper‑V, with CVSS base score 8.6 (LOCAL, HIGH). The documents do not provide additional ...

CVE-2025-49744

CVE-2025-49744 — Microsoft Graphics Component heap-based buffer overflow can allow an authorized, local attacker to escalate privileges. Connected sources confirm this as an elevation-of-privilege vulnerability in the Microsoft Graphics Component (a graphics driver component). The provided docume...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2024-43646

Technical details are not publicly provided in the supplied documents. Monitor for updates from Microsoft/Microsoft Security Update Guide and NVD.

CVE-2025-21207

Technical details about CVE-2025-21207 (Windows Cdpsvc DoS) are not publicly disclosed in the provided documents. Monitor updates from Microsoft and CVE pages for affected versions, impact details, and fixes.

CVE-2025-21300

CVE-2025-21300 affects Windows UPnP Device Host. Connected CNVD data ties the issue to the Windows upnphost.dll component and a Denial of Service impact. Microsoft has published January 2025 security updates to address this family of issues; applying KB5050021 (and related January 2025 updates) i...

CVE-2025-27468

Technical details about CVE-2025-27468 (affected product, root cause, and patch status) are not publicly provided in the supplied Connected documents. Monitor for official updates from MSRC/Microsoft for specifics.

CVE-2025-49691

CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...