CVE-2026-50452

CVE-2026-50452 (Windows Runtime) describes a race condition in Windows Runtime due to improper synchronization on a shared resource. This concurrency flaw can allow an unauthenticated, remote attacker to elevate privileges over the network. The CVE is associated with a high base score (7.0) and n...

CVE-2025-60715

Technical details about CVE-2025-60715 (RRAS heap overflow, affected components, fixes) are not provided in the connected documents. Public technical specifics, affected versions, and remediation steps are not disclosed here; monitor for official updates.

CVE-2025-62567

CVE-2025-62567 is a Windows Hyper-V Denial of Service vulnerability caused by an integer underflow that can be triggered by a network-based attack from an authorized user. The linked sources classify the impact as Denial of Service with a CVSS v3.1 base score of 5.3 (Network, High attack complexi...

CVE-2026-20828

CVE-2026-20828 is an out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS). The impact is information disclosure and requires physical access (attack vector: PHYSICAL; base score 4.6). Affected: Windows ICS component within Windows. Root cause: out-of-bounds read as descri...

CVE-2026-21244

CVE-2026-21244 affects Windows Hyper-V with a heap-based buffer overflow that enables local code execution by an authenticated attacker. The CVSS 3.1 vector ( LOCAL, LOW PR, LOW AC, USER INTERACTION REQUIRED, S: U ) indicates high impact to confidentiality, integrity, and availability if exploite...

CVE-2026-26152

CVE-2026-26152 pertains to Microsoft Cryptographic Services with a local elevation-of-privilege vulnerability. The CVSS 3.1 vector indicates local access, high impact on confidentiality, integrity, and availability, with user interaction not required. PrivilegesRequired is LOW, AttackComplexity i...

CVE-2026-26176

Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.

CVE-2026-26181

CVE-2026-26181 : Microsoft Brokering File System Elevation of Privilege. The CVSS vector (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) yields a base score of 7.8 (HIGH). The vulnerability affects the file system brokering path and is described as an Elevation of P...

CVE-2026-27929

CVE-2026-27929 is a Time-of-check Time-of-use (toctou) race condition in Windows LUAFV (LUA File Virtualization Filter Driver) that enables a locally authenticated attacker to elevate privileges. Red Hat and NCSC advisories confirm the Windows LUAFV vulnerability and its local privilege-escalatio...

CVE-2026-42900

The CVE-2026-42900 entry concerns a race condition caused by improper synchronization in the Windows App Store. Reported impact is privilege elevation over a network, implying an unauthorized attacker could exploit a timing-related flaw to escalate access. Documents consistently describe a concur...

CVE-2026-42906

CVE-2026-42906 is a Windows Shell information-disclosure vulnerability. The Windows Shell component exposes sensitive information to an unauthorized actor via a local attack with low privileges required and no user interaction. The impact is confidentiality loss (C:H) while integrity/availability...

CVE-2026-44805

CVE-2026-44805: Use-after-free in Windows Network Controller (NC) Host Agent enables an authorized local attacker to cause denial of service. Affected component is the Windows Network Controller Host Agent; underlying cause is use-after-free. CVSSv3.1 base score 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I...

CVE-2026-48568

CVE-2026-48568 concerns a protection mechanism failure in Windows Secure Boot that allows a local attacker to bypass a security feature. The connected sources indicate an in-scope vulnerability where an attacker with HIGH privileges and local access can bypass integrity and confidentiality protec...

CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

CVE-2026-50310

CVE-2026-50310 describes an integer overflow/wraparound in Windows Devices Human Interface which allows an authorized local attacker to disclose information. Affected component is the Windows Devices Human Interface; root cause is an overflow condition that can leak data locally. Microsoft has re...

CVE-2026-50690

CVE-2026-50690 is a Windows SMB information-disclosure vulnerability described as caused by the use of an uninitialized resource within Windows SMB that can allow an authorized local attacker to disclose information. The CVE is linked to Microsoft advisories and MSRC updates addressing the issue,...

CVE-2025-53134

Technical details about CVE-2025-53134 are not publicly disclosed in the provided Connected documents. Available sources confirm the vulnerability description only (race condition in Windows Ancillary Function Driver for WinSock with local privilege escalation). Monitor for updates.

CVE-2025-53809

CVE-2025-53809 affects Windows Local Security Authority Subsystem Service (LSASS). The issue is an improper input validation in LSASS that enables an authenticated attacker to trigger a network-based Denial of Service. Public exploitation is listed by threat intel sources. The fix is included in ...

CVE-2025-54115

Technical details about CVE-2025-54115 are not publicly provided in the connected documents. Based on the initial description, no product/version specifics or mitigation are given; monitor for updates.

CVE-2025-55693

CVE-2025-55693 is a Windows Kernel elevation-of-privilege vulnerability caused by a use-after-free in the Windows Kernel. It allows a local attacker to escalate privileges. Public exploits exist per connected advisories, and Microsoft has released updates (MSRC) to fix the issue; apply the corres...

CVE-2025-59188

CVE-2025-59188 is described as an information-disclosure vulnerability in the Windows Failover Cluster that could allow an authorized local attacker to disclose sensitive information. The available connected MS advisories and vulnerability lists indicate this affects Windows Failover Cluster and ...

CVE-2025-62565

CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...

CVE-2026-20812

CVE-2026-20812 is an LDAP tampering vulnerability in Windows LDAP (the Lightweight Directory Access Protocol) caused by improper input validation. The issue is exploitable by an authorized attacker over the network and primarily impacts data integrity (CVE CVSS indicates network access, low privi...

CVE-2026-20870

CVE-2026-20870 corresponds to a Use-after-free vulnerability in Windows Win32K, specifically in the ICOMP component, enabling a locally authenticated attacker to achieve elevation of privileges . The root cause is a memory-management issue in Win32K ICOMP leading to use-after-free conditions that...

CVE-2026-25180

CVE-2026-25180 describes an out-of-bounds read in the Microsoft Graphics Component that can allow an unauthorized local attacker to disclose information. Connected sources (NVD, CVE listing, ENISA/NCSC advisories) confirm the affected component as Microsoft Graphics Component and the impact as lo...

CVE-2026-26180

CVE-2026-26180 is a Windows kernel local elevation of privilege issue. The vulnerability affects the Windows kernel with a local attacker able to gain HIGH impact on confidentiality, integrity, and availability. Exploitation is LOCAL with LOW complexity and LOW privileges required, and no user in...

CVE-2026-32081

Technical details (affected products, vulnerable components, root cause, exploits, or remediation) are not provided in the supplied documents; monitor for updates from Microsoft.

CVE-2026-32093

CVE-2026-32093 affects Windows Function Discovery Service (fdwsd.dll). The vulnerability is a race condition due to improper synchronization in shared resource access, enabling an authorized attacker to elevate privileges locally. Public sources (MSRC/MSKB advisories and NCSC) confirm the issue a...

CVE-2026-32225

CVE-2026-32225 pertains to a Windows Shell security feature bypass. The entry indicates a remote-accessible vulnerability with NETWORK attack vector, requiring user interaction, and impacts confidentiality, integrity, and availability (all HIGH). The CVSSv3.1 base score is 8.8 (HIGH) with an Offi...

CVE-2026-34341

CVE-2026-34341 is a Windows LLDP (Link-Layer Discovery Protocol) vulnerability described as a double free in LLDP that allows an authenticated, local attacker to gain elevated privileges. The connected documents confirm the issue and impact (local privilege escalation) but do not provide concrete...

CVE-2026-40408

CVE-2026-40408 is described as a use-after-free in Windows kernel-mode drivers that enables local privilege escalation for an authenticated attacker. The provided documents consistently state local elevation of privileges but do not specify the affected products, driver components, or vulnerable ...

CVE-2026-42828

CVE-2026-42828 describes a buffer over-read in the Windows Projected File System Filter Driver that allows an authorized attacker to elevate privileges locally . The vulnerability is documented with a CVSS v3.1 base score of 7.8 (High) and is assessed as a Local attack vector with Low attack comp...

CVE-2026-42905

The CVE-2026-42905 entry describes a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to escalate privileges locally. Affected component: Windows DWM Core Library. Root cause: use-after-free condition leading to local privilege escalation. Impact: el...

CVE-2026-42973

Technical details (affected software, conditions, exploitability, and remediation) are not publicly available in the provided documents; monitor for updates.

CVE-2026-42986

CVE-2026-42986 describes a use-after-free in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally. Affected: Microsoft Graphics Component; vulnerability class: use-after-free leading to local privilege escalation. Root cause as stated: after-free condi...

CVE-2026-45599

The CVE-2026-45599 entry describes a use-after-free in Windows’ Universal Plug and Play component (upnp.dll) that enables a remote attacker to execute code over the network via the UPnP Device Host. The vulnerability is rated CVSSv3.1: 8.1 (HIGH) with Network attack vector, no privileges required...

CVE-2026-48564

CVE-2026-48564 refers to a heap-based buffer overflow in Windows DHCP Server that enables a network-based remote code execution by an authorized attacker. According to the available records, the vulnerability is high severity (CVSS v3.1: 8.8), with network as the attack vector, low attack complex...

CVE-2026-50366

CVE-2026-50366 describes a Denial of Service in Windows Active Directory Domain Services caused by a null pointer dereference. The vulnerability is exploitable over the network with no user interaction, requiring low privileges and network access from an authenticated attacker; the impact is deni...

CVE-2025-50167

CVE-2025-50167 involves a race condition in Windows Hyper-V due to improper synchronization on a shared resource, enabling an authorized local attacker to elevate privileges. The description in the Connected Documents confirms the vulnerability impact as local privilege escalation within Hyper‑V....

CVE-2025-53133

CVE-2025-53133 is a Windows PrintWorkflowUserSvc use-after-free vulnerability that enables local privilege escalation for an authorized user. The initial description and multiple connected sources align on a Windows kernel/user-mode interaction where a mismanagement of resources in PrintWorkflowU...

CVE-2025-53141

CVE-2025-53141 refers to a null pointer dereference in the Windows Ancillary Function Driver for WinSock that can enable local privilege escalation for an authenticated user. The connected Windows-ecosystem data identifies this CVE as affecting the WinSock ancillary driver with a high base severi...

CVE-2025-53148

CVE-2025-53148 affects Windows Routing and Remote Access Service (RRAS); the issue is described as an information disclosure due to use of an uninitialized resource. Connected sources confirm RRAS involvement and show that Microsoft released updates to fix Windows vulnerabilities, including RRAS-...

CVE-2025-53156

CVE-2025-53156 is a Windows Storage Port Driver information disclosure vulnerability. The affected component is the Windows Storage Port Driver, with an impact of exposing sensitive data to a local, authorized attacker. The CVSS 3.1 base metrics indicate a Local attack with Low attack complexity ...

CVE-2025-53722

CVE-2025-53722 affects Windows Remote Desktop Services. Described as Denial-of-Service via uncontrolled resource consumption, exploitable over the network with no user interaction and no privileges required. CVSS v3.1 base score 7.5 (Network, Low attack complexity, No privileges, No user interact...

CVE-2025-54098

Technical details about CVE-2025-54098 (Hyper-V local privilege elevation) are not provided in the connected documents. Monitor for future updates from Microsoft for affected products, impact, and mitigations.

CVE-2025-54895

CVE-2025-54895 : Integer overflow or wraparound in Windows SPNEGO Extended Negotiation can let an authorized, locally authenticated attacker elevate privileges. The connected documents confirm the vulnerability in the Windows SPNEGO Extended Negotiation path and indicate the impact as local privi...

CVE-2025-55226

Technical details about CVE-2025-55226 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and Vulners for affected products, versions, and fixes once details are published.

CVE-2025-55331

CVE-2025-55331: Use-after-free in Windows PrintWorkflowUserSvc that allows a locally authenticated user to escalate privileges. Connected advisories indicate Microsoft released October 2025 security updates (e.g., KB5066835 and related KBs) addressing Windows print/cryptography components; apply ...

CVE-2025-55684

CVE-2025-55684 is a local elevation-of-privilege vulnerability in Windows PrintWorkflowUserSvc caused by a use-after-free condition. It affects Windows components related to printing workflows, allowing an authenticated local attacker to escalate privileges. Public exploits are noted in at least ...

CVE-2025-55689

CVE-2025-55689 is a Windows PrintWorkflowUserSvc elevation-of-privilege vulnerability (use-after-free) that allows an authorized, local attacker to escalate privileges. The advisory and MSRC entry confirm the component (PrintWorkflowUserSvc) as affected and describe a local privilege escalation t...