1625 matches found
CVE-2025-32714
CVE-2025-32714 maps to an improper access control in Windows Installer enabling local privilege escalation for an authenticated attacker. Connected sources confirm Windows Installer as the vulnerable component and describe the impact as obtaining elevated privileges locally. Remediation is via Mi...
CVE-2025-33054
CVE-2025-33054 affects the Remote Desktop Client and is caused by insufficient UI warnings for dangerous operations, enabling spoofing over the network. Affected product: Microsoft Remote Desktop Client on Windows/Windows Server. Impact is spoofing of the user interface with high CVSS score (3.1:...
CVE-2025-33063
CVE-2025-33063 affects the Windows Storage Management Provider and describes an out-of-bounds read that can let an authorized local attacker disclose information. The vulnerability has a high confidentiality impact (data exposure) with local attack vector; there is no exploitation detail in the I...
CVE-2025-29958
Technical details about CVE-2025-29958 (uninitialized resource in RRAS) are not public in the provided documents. Monitor for vendor advisories and future updates.
CVE-2025-32719
CVE-2025-32719 is a Windows Storage Management Provider vulnerability described as an out-of-bounds read that allows an authorized, local attacker to disclose information. The CVE has a CVSS v3.1 base score of 5.5 (Local, Low attack complexity, Privileges Required: Low) with high confidentiality ...
CVE-2025-49760
Technical details about CVE-2025-49760 are not publicly provided in the supplied documents. No affected products, CVSS specifics, or remediation are confirmed here. Monitor for updates from official advisories (e.g., MSRC) for concrete information.
CVE-2026-26182
CVE-2026-26182 is a Windows elevation-of-privilege vulnerability caused by a use-after-free in the Windows Ancillary Function Driver for WinSock. The impact is local privilege escalation for an authorized user, as described by multiple sources. Public notices confirm the issue affects Windows com...
CVE-2026-33104
CVE-2026-33104 is a Windows Win32K - GRFX race condition vulnerability rated CVSS v3.1 7.0 (High) with local privilege escalation impact. The connected sources label this as a Win32K-GRFX issue enabling “Obtain increased privileges” and reference Microsoft Windows updates guidance, but the provid...
CVE-2026-33840
CVE-2026-33840 is a Windows Win32K use-after-free vulnerability in the ICOMP component that enables a locally authenticated attacker to elevate privileges. The root cause is a use-after-free in Win32K/ICOMP; impact is local privilege escalation with high severity per CVSS: AV:L/AC:L/PR:L/UI:N/S:U...
CVE-2026-42977
CVE-2026-42977 describes a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with Local attack vector, high complexity, and req...
CVE-2025-32713
CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...
CVE-2025-32721
CVE-2025-32721 is a Windows Recovery Driver privilege-escalation flaw caused by improper link resolution before file access. Reported CVSS v3.1 base score 7.3 (High) with local, low-attack-skill requirements, user interaction required, and high impact on confidentiality, integrity, and availabili...
CVE-2025-33069
CVE-2025-33069 affects Windows App Control for Business (WDAC). The root cause is improper verification of cryptographic signatures in WDAC, enabling a local attacker to bypass the security feature. The vulnerability is categorized as a security feature bypass with medium severity (CVSS 3.1: Loca...
CVE-2026-20854
CVE-2026-20854 is a Windows Local Security Authority Subsystem Service (LSASS) use-after-free vulnerability that would allow an authenticated attacker to execute code remotely over the network. The primary public details come from Microsoft update guidance and vulnerability trackers, which identi...
CVE-2026-34337
CVE-2026-34337 describes a local privilege escalation via a use-after-free in the Windows Cloud Files Mini Filter Driver. An authorized attacker could elevate privileges locally (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). The connected documents confirm the vulnerability descripti...
CVE-2026-42825
CVE-2026-42825 describes a use-after-free in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The description clearly states local privilege escalation as the impact, but the connected documents do not provide specifics on affected product versions, root...
CVE-2026-42909
CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...
CVE-2025-29956
Technical details (affected components, vulnerable versions, exploitability, and remediation) are not provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for CVE-2025-29956.
CVE-2025-29961
Technical details for CVE-2025-29961 are not provided in the connected documents. The RRAS out-of-bounds read description exists in the Initial Document, but no vendor/affected versions, root cause, or fixes are confirmed here. Monitor for updates.
CVE-2025-48824
Technical details (affected product, version, root cause, exploit, or remediation) are not provided in the connected documents; no concrete specifics about CVE-2025-48824 are available here. Monitor for official disclosures and updates.
CVE-2025-49689
Technical details for CVE-2025-49689 (affected product/component/impact) are not publicly available in the provided documents. Monitor for updates from official sources; no concrete vendor/version/exploit information is available here.
CVE-2025-49721
CVE-2025-49721 describes a heap-based buffer overflow in the Windows Fast FAT Driver that enables local privilege escalation for an unauthenticated attacker requiring user interaction. The CVSS 3.1 vector (LOCAL/LOW/NONE UI:R S:U) yields a base score of 7.8 (HIGH) with impact on confidentiality, ...
CVE-2025-49724
CVE-2025-49724 is a Use-After-Free vulnerability in Windows Connected Devices Platform Service that can lead to remote code execution over the network. According to initial data, impact is high (C/H/I/A) with CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U. Connected documents confirm the vulnerability exists ...
CVE-2025-49734
CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...
CVE-2025-29838
CVE-2025-29838 describes a local-privilege-escalation vulnerability in the Windows ExecutionContext Driver caused by a null pointer dereference in Windows Drivers. Affected: Windows Client/Server builds with the ExecutionContext Driver. Impact per sources: unauthorized elevation of privileges. Th...
CVE-2025-47971
CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...
CVE-2025-48800
CVE-2025-48800 affects Windows BitLocker. Description confirms a protection mechanism failure that enables bypass of BitLocker with physical access. Connected NC SC advisory lists Windows BitLocker under CVE-2025-48800 with a CVSS v3.1 impact of 6.80 (Physical access required, no user interaction...
CVE-2025-49667
Technical details about CVE-2025-49667 are not publicly provided in the supplied connected and initial documents. Monitor for updates from official advisories; current materials only indicate a local privilege escalation via Win32K ICOMP without specifics.
CVE-2026-58608
CVE-2026-58608 affects Windows Print Spooler components, where a race condition from improper synchronization on a shared resource enables remote code execution over a network. The vulnerability allows an authenticated attacker with low privileges to execute code with high impact (C/H; I/H; A/H) ...
CVE-2025-29830
Technical details about CVE-2025-29830 are not provided in the connected documents. The available data only notes a RRAS information disclosure vulnerability. Monitor official sources for updates on affected products, root cause, and remediation.
CVE-2025-55230
CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...
CVE-2026-20868
CVE-2026-20868 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that enables remote code execution over the network. Public disclosures and vendor advisories (RRAS context) indicate this vulnerability affects Windows RRAS; Microsoft has released January 2026 sec...
CVE-2026-32202
CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...
CVE-2025-29957
Technical details about CVE-2025-29957 (Windows Deployment Services) are not provided in the supplied documents. Please monitor for updated advisories from Microsoft or NVD for affected product/version, root cause, impact, and remediation.
CVE-2025-54918
CVE-2025-54918 describes an improper authentication flaw in Windows NTLM that enables a network-authenticated attacker to elevate privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and privileges required. A PoC exploit exists on GitHub (CVE-2025-54918-...
CVE-2026-20817
CVE-2026-20817 is described as an elevation-of-privilege vulnerability in Windows Error Reporting caused by improper handling of insufficient permissions. The entry lists local privilege escalation with high impact ( Confidentiality/Integrity/Availability = High) and a CVSS v3.1 base score of 7.8...
CVE-2026-20922
CVE-2026-20922 is a heap-based buffer overflow in Windows NTFS that enables a locally authenticated attacker to execute code. The description and connected sources confirm NTFS as the vulnerable component and local execution as the impact. Public details in the provided documents are consistent w...
CVE-2026-21250
CVE-2026-21250 : Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. The CVSS 3.1 vector (Local, Low attack complexity, Low privileges required, No user interaction) yields a base score of 7.8 (HIGH). Documented impact is local privilege ...
CVE-2026-23669
CVE-2026-23669 is a Windows Print Spooler remote code execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, Low privileges required, No user interaction). It impacts confidentiality, integrity, and availability (all HIGH). Exploit code maturity is UNPROVEN. The Mic...
CVE-2026-35420
CVE-2026-35420 is described in the provided sources as a heap-based buffer overflow in the Windows kernel that enables a locally authenticated attacker to achieve privilege escalation. The CVE entry itself cites an elevation of privileges without detailing exploit vectors beyond local access, and...
CVE-2026-40377
Technical details (affected components, root cause, impact specifics, or fixes) are not publicly provided in the connected documents. Monitor vendor advisories for patch information and affected products; no additional specifics are available here.
CVE-2025-29960
CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) can lead to information disclosure over the network. The description specifies network-based access with high confidentiality impact; no explicit product version or fix details are provided in the connected doc...
CVE-2025-48803
CVE-2025-48803 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is a missing integrity check in the Enclave, enabling an authorized local attacker to obtain elevated privileges. The NCSC aggregation also lists CVE-2025-48803 with an impact of gaining elevated privileges...
CVE-2025-48807
CVE-2025-48807 affects Windows Hyper-V: improper restriction of communication to intended endpoints enables an authorized, local attacker to execute code. The CVE is tracked with a 3.1 3.1 CVSSv3.1 vector: Local, High impact on confidentiality, integrity, and availability; exploit requires Low pr...
CVE-2025-29832
Technical details about CVE-2025-29832 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are detailed here. Monitor for updates.
CVE-2025-48003
CVE-2025-48003 is a Windows BitLocker security feature bypass vulnerability described as a protection mechanism failure that allows an unauthorized attacker to bypass a security feature with a physical attack. The connected documents do not provide concrete technical details such as root cause, a...
CVE-2025-48818
CVE-2025-48818 is a TOCTOU race condition in Windows BitLocker that enables bypass of a security feature via physical access. The CVE is listed in NCSC/NCSC-2025-0213 with impact described as bypassing security measures under Windows BitLocker and a CVSS v3.1 base score of 6.8 (PHYSICAL vector, L...
CVE-2025-49723
CVE-2025-49723 affects Windows StateRepository API, enabling local tampering of data due to missing authorization in the Server file path. The CNVD/NCSC entries confirm impact as manipulation of data with a high CVSS (8.8) and local attack vector; no public exploitation details are provided in th...
CVE-2025-49753
Technical details for CVE-2025-49753 are not provided in the Connected documents; the Initial Description mentions a heap-based buffer overflow in RRAS but no vendor/product/version/impact details are given in the connected material.