CVE-2026-42908

The CVE-2026-42908 entry describes an Out-of-bounds read in Windows Remote Desktop Protocol (RDP) that enables an unauthenticated attacker to disclose information over the network. Affected component is Windows RDP; the underlying fault is an out-of-bounds read, leading to information disclosure....

CVE-2026-45635

CVE-2026-45635 affects Windows UPnP Device Host through a use-after-free in upnp.dll, enabling remote code execution over the network. The issue is tied to the Universal Plug and Play component, with impact described as remote, unauthenticated code execution; CVSSv3.1 base score 8.1 (HIGH). Affec...

CVE-2026-49177

CVE-2026-49177 is a Windows TCP/IP vulnerability described as an out-of-bounds read that allows an authenticated, local attacker to disclose information. The CVE is supported by multiple sources in the Connected documents (NVD/NCSC/EUVD), which identify the affected component as Windows TCP/IP an...

CVE-2026-50360

The CVE-2026-50360 entry describes an Elevation of Privilege in Windows SMB Server caused by an incorrect authentication algorithm, allowing an authorized attacker to elevate privileges over the network. Published CVSS v3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 8.8, HIGH). Windows has...

CVE-2026-54113

The CVE-2026-54113 entry pertains to resource allocation without limits or throttling in the Windows Kernel accessible over a network, enabling a remote attacker to cause a denial of service. Documents indicate the affected component is the Windows Kernel involved in network-resource handling; ro...

CVE-2026-61367

The CVE-2026-61367 entry describes a local Privilege Escalation in Windows Remote Desktop Services caused by missing authentication for a critical function. An authorized attacker can elevate privileges locally (ATT&CK-style: Privilege Escalation) with a CVSSv3.1 base score of 7.8 (HIGH) and LOCA...

CVE-2026-61934

CVE-2026-61934 details (from provided documents): A use-after-free bug in the Windows Bind Filter Driver enables a locally authenticated attacker to achieve privilege escalation. The vulnerability is associated with local attack vector and requires low attack complexity with low privileges, with ...

CVE-2025-49760

Technical details about CVE-2025-49760 are not publicly provided in the supplied documents. No affected products, CVSS specifics, or remediation are confirmed here. Monitor for updates from official advisories (e.g., MSRC) for concrete information.

CVE-2025-59199

CVE-2025-59199 affects the Software Protection Platform (SPP). It is described as an improper access control vulnerability that allows a locally authenticated attacker to escalate privileges (CVSSv3.1 base score 7.8, HIGH; attack vector: LOCAL; privileges required: LOW; user interaction: NONE). T...

CVE-2025-64678

CVE-2025-64678 is a Windows RRAS heap-based buffer overflow vulnerability that allows a network-based attacker to achieve remote code execution. The NVD entry confirms the flaw, with a CVSS v3.1 base score of 8.8 (High), indicating a network attack vector, no privileges required, and user interac...

CVE-2026-32091

CVE-2026-32091 is a Microsoft elevation of privilege vulnerability in the Brokering File System with a CVSS 3.1 base score of 8.4 (HIGH). It is a local, no-user-interaction attack requiring no privileges, with high impact on confidentiality, integrity, and availability. The exploitation status is...

CVE-2026-33840

CVE-2026-33840 is a Windows Win32K use-after-free vulnerability in the ICOMP component that enables a locally authenticated attacker to elevate privileges. The root cause is a use-after-free in Win32K/ICOMP; impact is local privilege escalation with high severity per CVSS: AV:L/AC:L/PR:L/UI:N/S:U...

CVE-2026-65775

CVE-2026-65775 maps to a local privilege escalation due to a use-after-free in Windows Win32K. The affected component is Win32k in Windows; the underlying flaw is use-after-free, enabling an authorized attacker to elevate privileges locally (CVSS v3.1: 7.8, HIGH). The impact stated includes high ...

CVE-2025-29970

CVE-2025-29970 is a local privilege-escalation vulnerability in the Microsoft Brokering File System caused by a use-after-free condition. An authorized attacker could exploit this to elevate privileges on the host. Public documentation identifies the affected component and the root cause as a use...

CVE-2025-30385

Technical details about CVE-2025-30385 are not provided in the connected documents. The initial description mentions a Windows use-after-free in the CLFS driver that could elevate privileges, but no vendor/version specifics or fixes are disclosed here. Monitor for authoritative updates.

CVE-2025-48003

CVE-2025-48003 is a Windows BitLocker security feature bypass vulnerability described as a protection mechanism failure that allows an unauthorized attacker to bypass a security feature with a physical attack. The connected documents do not provide concrete technical details such as root cause, a...

CVE-2026-26155

CVE-2026-26155 is a Microsoft Local Security Authority Subsystem Service information disclosure vulnerability. The entry lists a CVSS v3.1 base score 6.5 (MEDIUM) with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a Network attack vector, low complexity , and low privileges requ...

CVE-2026-45607

CVE-2026-45607 affects Windows Hyper-V with an out-of-bounds read vulnerability that allows an attacker to execute code locally. Documents indicate LOCAL attack vector, no user interaction required, and high impact on confidentiality, integrity, and availability. No specific remediation steps or ...

CVE-2026-50368

CVE-2026-50368 refers to a stack-based buffer overflow in Active Directory Federation Services (AD FS) that allows an unauthenticated attacker to cause a denial of service over the network. The vulnerability arises in the AD FS component and is described in multiple sources as enabling a DS impac...

CVE-2026-61356

CVE-2026-61356 : The vulnerability concerns Windows Remote Desktop Services . The issue is described as “Missing authentication for a critical function,” enabling an elevation of privileges attack from a local, authenticated position. The CVSS 3.1 score is reported as 7.8 (HIGH) with local access...

CVE-2026-62783

CVE-2026-62783 describes a heap-based buffer overflow in Windows Remote Access Connection Manager that allows an authenticated, local attacker to escalate privileges. Affected component: Windows Remote Access Connection Manager (RAS). Underlying issue: heap overflow leading to local code executio...

CVE-2026-62894

CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...

CVE-2025-32721

CVE-2025-32721 is a Windows Recovery Driver privilege-escalation flaw caused by improper link resolution before file access. Reported CVSS v3.1 base score 7.3 (High) with local, low-attack-skill requirements, user interaction required, and high impact on confidentiality, integrity, and availabili...

CVE-2025-33069

CVE-2025-33069 affects Windows App Control for Business (WDAC). The root cause is improper verification of cryptographic signatures in WDAC, enabling a local attacker to bypass the security feature. The vulnerability is categorized as a security feature bypass with medium severity (CVSS 3.1: Loca...

CVE-2025-48824

Technical details (affected product, version, root cause, exploit, or remediation) are not provided in the connected documents; no concrete specifics about CVE-2025-48824 are available here. Monitor for official disclosures and updates.

CVE-2026-24283

CVE-2026-24283 involves a local elevation-of-privilege in the UNC Provider Kernel Driver. The vulnerability is rated HIGH with CVSS 3.1: 8.8, impacting confidentiality, integrity, and availability at HIGH levels, exploitable with LOCAL attack vector and LOW complexity, requiring LOW privileges an...

CVE-2026-25178

CVE-2026-25178 affects Windows Ancillary Function Driver for WinSock and is classified as a use-after-free that can lead to local elevation of privileges. Public documentation in NVD/CVE and EUVD/NCSC confirms the affected component and privilege escalation impact. Microsoft has released security...

CVE-2026-27915

CVE-2026-27915 affects Windows UPnP Device Host. It enables local privilege escalation with a low attack complexity and no user interaction, requiring limited privileges and resulting in high confidentiality, integrity, and availability impact. The CVSSv3.1 base score is 7.8 ( HIGH ), with exploi...

CVE-2026-32161

CVE-2026-32161 describes a race condition in the Windows Native WiFi Miniport Driver caused by improper synchronization, enabling an adjacent-network attacker to potentially execute code on the vulnerable system. The description across sources notes a remote-code-execution impact with a CVSS v3.1...

CVE-2026-35419

CVE-2026-35419 describes an out-of-bounds read in Windows DWM Core Library that can disclose information locally by an authorized user. The available sources identify the vulnerability as a local-attack vector with low privileges required and no user interaction, resulting in a high confidentiali...

CVE-2026-40407

CVE-2026-40407 describes a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that permits an authorized, local attacker to elevate privileges. The vulnerability impact is local privilege escalation with a CVSS v3.1 base score of 7.8 (HIGH) and impact to confidentialit...

CVE-2026-42969

Technical details about CVE-2026-42969 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-44812

CVE-2026-44812 affects Windows graphics component Win32K GRFX, where an integer overflow/wraparound in GRFX can allow an unauthorized attacker to execute code locally. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Exploitation details are not provide...

CVE-2026-56179

CVE-2026-56179 describes an origin validation error in Windows Network Address Translation (NAT) that enables spoofing on an adjacent network. The vulnerability has a CVSS v3.1 base score of 8.3 (HIGH) with attack vector Adjacent, high impact on confidentiality, integrity, and availability, and n...

CVE-2026-61353

CVE-2026-61353 describes a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege escalation . The vulnerability arises from a heap overflow in the Telephony Service component, leading to potential unauthorized system access....

CVE-2026-62757

Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...

CVE-2025-49667

Technical details about CVE-2025-49667 are not publicly provided in the supplied connected and initial documents. Monitor for updates from official advisories; current materials only indicate a local privilege escalation via Win32K ICOMP without specifics.

CVE-2026-42837

CVE-2026-42837 describes a buffer over-read in the Windows Projected File System Filter Driver that allows an authenticated local attacker to elevate privileges. The affected component is the Windows Projected File System Filter Driver; root cause is a buffer over-read within the filter driver. T...

CVE-2026-45641

CVE-2026-45641 affects Windows Hyper-V. The vulnerability is an out-of-bounds read in Hyper-V that enables a local attacker to execute code. Exploitation would be local with no user interaction and requires no privileges beyond those of the attacker, with a high impact on confidentiality, integri...

CVE-2026-48564

CVE-2026-48564 refers to a heap-based buffer overflow in Windows DHCP Server that enables a network-based remote code execution by an authorized attacker. According to the available records, the vulnerability is high severity (CVSS v3.1: 8.8), with network as the attack vector, low attack complex...

CVE-2026-50451

CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...

CVE-2026-54990

CVE-2026-54990 describes a heap-based buffer overflow in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. The issue is characterized as high severity (CVSS v3.1 base score 9.8, CRITICAL) with network attack vector, no privileges required, and no ...

CVE-2026-59136

CVE-2026-59136 affects Microsoft COM for Windows due to use of an uninitialized resource, enabling a locally authorized attacker to disclose information. The vulnerability impact is information disclosure with a CVSS v3.1 base score of 5.5 (Medium); attack requires local access, low privileges, a...

CVE-2026-65773

CVE-2026-65773 concerns improper access control in Windows Kernel, enabling a locally authenticated attacker to elevate privileges. Affected software/component: Windows Kernel (details not expanded in provided documents). Root cause: incorrect access control checks; impact: local privilege escala...

CVE-2026-70345

CVE-2026-70345 describes a heap-based buffer overflow in Windows Installer that enables a locally authenticated attacker to achieve elevation of privilege. The root cause is a heap-based overflow within the Windows Installer process, with an attacker requiring local access and no user interaction...

CVE-2025-29956

Technical details (affected components, vulnerable versions, exploitability, and remediation) are not provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for CVE-2025-29956.

CVE-2025-29958

Technical details about CVE-2025-29958 (uninitialized resource in RRAS) are not public in the provided documents. Monitor for vendor advisories and future updates.

CVE-2025-29960

CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) can lead to information disclosure over the network. The description specifies network-based access with high confidentiality impact; no explicit product version or fix details are provided in the connected doc...

CVE-2025-48803

CVE-2025-48803 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is a missing integrity check in the Enclave, enabling an authorized local attacker to obtain elevated privileges. The NCSC aggregation also lists CVE-2025-48803 with an impact of gaining elevated privileges...

CVE-2025-49689

Technical details for CVE-2025-49689 (affected product/component/impact) are not publicly available in the provided documents. Monitor for updates from official sources; no concrete vendor/version/exploit information is available here.