CVE-2026-42905

The CVE-2026-42905 entry describes a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to escalate privileges locally. Affected component: Windows DWM Core Library. Root cause: use-after-free condition leading to local privilege escalation. Impact: el...

CVE-2026-45653

CVE-2026-45653: A Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The issue affects kernel code paths susceptible to use-after-free, with an attack vector that is LOCAL, requiring LOW privileges and NO user interaction; the impact per...

CVE-2026-48568

CVE-2026-48568 concerns a protection mechanism failure in Windows Secure Boot that allows a local attacker to bypass a security feature. The connected sources indicate an in-scope vulnerability where an attacker with HIGH privileges and local access can bypass integrity and confidentiality protec...

CVE-2026-49808

The CVE-2026-49808 entry describes a race condition in the Windows kernel caused by concurrent execution on a shared resource with improper synchronization. An authorized local attacker can elevate privileges, as indicated by the description and CVSS vector (Local attack, High impact to confident...

CVE-2026-50305

CVE-2026-50305 is a Microsoft Brokering File System (Windows) use-after-free vulnerability leading to local privilege escalation for an authenticated user. The available connected data confirms the root cause as a use-after-free in the Brokering File System and a resulting privilege elevation. Ex...

CVE-2026-50357

CVE-2026-50357 affects Windows Resilient File System (ReFS). The issue is a numeric truncation error in ReFS that, per the provided documents, can enable an authorized attacker to execute code locally. The MSRC/MSVCN details list this as an elevation of privileges / local arbitrary code execution...

CVE-2026-50409

CVE-2026-50409 affects the Windows Overlay Filter. The issue is an information disclosure where an authorized attacker can locally access sensitive information exposed by the Overlay Filter. The base CVSS v3.1 is 5.5 (Local, Low Attack Complexity, Low Privileges) with High confidentiality impact....

CVE-2026-50413

CVE-2026-50413 is a Windows Runtime elevation-of-privilege vulnerability caused by a use-after-free condition. The NVD/NCSC entries describe an authorized local attacker exploiting a use-after-free in Windows Runtime to gain elevated privileges. The CVSSv3.1 base score is 8.8 (HIGH) with LOCAL at...

CVE-2026-54125

CVE-2026-54125 affects Windows Runtime and describes a race-condition vulnerability in concurrent execution on a shared resource that enables local privilege elevation for an authenticated attacker. The CVE is rated with CVSSv3.1 base metrics: AV Local, AC Low, PR Low, UI None, S unchanged, C/H/I...

CVE-2026-56186

CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...

CVE-2026-61927

CVE-2026-61927 documents a use-after-free in Windows Bind Filter Driver that enables an authorized local attacker to elevate privileges. The description specifies local elevation of privilege with high impact across confidentiality, integrity, and availability. The CVSSv3.1 data indicates Local a...

CVE-2026-62692

CVE-2026-62692 : Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 vector is LOCAL, LOW exploitability with NONE user interaction and impact on Confidentiality, Integrity, Availability (HIGH) ; base sco...

CVE-2026-62702

CVE-2026-62702 is a denial-of-service vulnerability in the Windows Graphics Kernel caused by a null pointer dereference that can be triggered over a network. Per NVD, CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H (base 8.6, HIGH) with impact on availability. Microsoft MSRC lists this vulnerabili...

CVE-2026-62769

CVE-2026-62769 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. The vulnerability arises from a faulty numeric handling (truncation) within the Windows DNS component, enabling local privilege escalation with high impact on confi...

CVE-2026-65788

CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...

CVE-2025-47159

CVE-2025-47159 affects Windows Virtualization-Based Security (VBS) Enclave. The vulnerability is a protection mechanism failure that could allow an authorized local attacker to escalate privileges. Affected component: VBS Enclave in Windows. Outcome: local privilege escalation with HIGH impact if...

CVE-2025-47984

Technical details about CVE-2025-47984 (affected components, exploitability, root cause, and fix) are not provided in the connected documents. Monitor for updates from MSRC/NVD for concrete context and remediation.

CVE-2025-48820

CVE-2025-48820 affects Windows AppX Deployment Service. It stems from improper link resolution before file access ("link following"), allowing an authenticated local attacker to elevate privileges. CVSS v3.1 score 7.8 (LOCAL, LOW privileges required, high confidentiality/integrity/availability im...

CVE-2025-48821

Technical details about CVE-2025-48821 are not provided in the supplied documents. No specific affected products, exploit information, or mitigation are described here; monitor for official updates and published fixes.

CVE-2025-49676

CVE-2025-49676: heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) over network; initial description provides this; connected documents do not add concrete technical details (affected products/versions, root cause, fix). Monitor for updates.

CVE-2025-50171

CVE-2025-50171 affects Windows Remote Desktop Server/Remote Desktop Services. Description confirms missing authorization enables an unauthenticated network attacker to spoof/impersonate a user over the network. The connected sources (Microsoft Windows Updates notes and vulnerability tables) indic...

CVE-2025-53808

CVE-2025-53808 is a local privilege-escalation in Windows Defender Firewall Service caused by a type confusion in resource access. Affected: Windows Defender Firewall Service (Windows). Impact and exploitability as per provided metrics: local, high privileges required, none user interaction, conf...

CVE-2025-54104

CVE-2025-54104 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion (incompatible type) issue that could enable a locally authenticated attacker to elevate privileges. Related connected docs (NCSC) list Defender Firewall Service and classify the impact as ...

CVE-2025-59220

CVE-2025-59220 involves a race condition in the Microsoft Windows Bluetooth Service, caused by improper synchronization of shared resources. The vulnerability enables an authenticated, local attacker to elevate privileges. The connected CNVD entry describes a resource-management error in the Wind...

CVE-2025-59275

CVE-2025-59275 involves Windows Authentication Methods with improper validation of a specified input type, enabling an authorized local attacker to escalate privileges. The connected EUVD-2025-34271 entry corroborates the same description. No technical details about affected product versions, roo...

CVE-2025-59505

CVE-2025-59505 is a Windows Smart Card Reader privilege-escalation vulnerability described as a double-free issue that could allow an authenticated local attacker to gain elevated privileges. The connected material confirms the CVE is categorized as a high-severity (CVSS v3.1 base 7.8) local, use...

CVE-2026-21231

CVE-2026-21231 describes a race condition in the Windows Kernel involving concurrent execution on a shared resource with improper synchronization, enabling local privilege escalation for an authorized attacker. The vulnerability impact is: local attack vector, requiring low privileges, no user in...

CVE-2026-21238

CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...

CVE-2026-34333

CVE-2026-34333 describes a use-after-free in Windows Win32K GRFX that enables a locally authenticated user to elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction, affecting confidentiality, int...

CVE-2026-40401

CVE-2026-40401 describes a null pointer dereference in Windows TCP/IP that can be exploited for local denial of service by an unauthorized attacker. The description in the sources states the vulnerability allows a local, unauthenticated denial of service, with a CVSS v3.1 base score of 7.1 (HIGH)...

CVE-2026-48575

CVE-2026-48575 describes a protection mechanism failure in Windows Secure Boot that allows an authorized, local attacker to bypass a security feature. The vulnerability enables a local escalation path with high impact on confidentiality and integrity (base score 7.9; AV:L/AC:L/PR:H/UI:N/S:C/C:H/I...

CVE-2026-50470

CVE-2026-50470 describes an out-of-bounds read in Windows Network Policy Server SNMP that could let an unauthenticated attacker disclose information over the network. The vulnerability affects the NPS SNMP handling and has a CVSS v3.1 base score of 7.5 (High) with network attack vector, low attac...

CVE-2026-50494

CVE-2026-50494 is a Windows NTFS vulnerability caused by a heap-based buffer overflow in NTFS handling that can let an authorized, local attacker execute code on the host. The issue affects Windows NTFS components and is being addressed by Microsoft security updates (e.g., KB5099539, KB5099540) r...

CVE-2026-50647

CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...

CVE-2026-62734

CVE-2026-62734 describes a race condition due to concurrent execution with an improper synchronization in the Windows Telephony Service, allowing an authorized attacker to locally elevate privileges. The issue is identified as a local privilege escalation with a high impact on confidentiality, in...

CVE-2026-62746

CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...

CVE-2026-62749

CVE-2026-62749 is a Windows Kernel use-after-free vulnerability that enables a locally authenticated attacker to achieve privilege escalation. The NVD entry notes a local attack vector with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.0, HIGH, LOCAL, LOW privileges req...

CVE-2026-62750

CVE-2026-62750 affects Windows HTTP Protocol Stack (http.sys). A partial string comparison vulnerability in the stack enables an unauthenticated attacker on an adjacent network to perform tampering. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) indicates adjacent access with no privileges...

CVE-2026-65796

CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution . A heap-based buffer overflow in the Windows iSCSI Target Service is the underlying vulnerability, enabling an unauthenticated attacker to execute code remotely over the network. Public sources consistently describe this as a rem...

CVE-2025-47978

CVE-2025-47978 is a Windows Kerberos denial-of-service vulnerability caused by an out-of-bounds read. The description and related documents confirm that an authorized network attacker could exploit this condition to disrupt service. Affected are Windows Kerberos functions; the underlying issue is...

CVE-2025-54093

CVE-2025-54093 is described as a time-of-check time-of-use (TOCTOU) race in the Windows TCP/IP stack that can enable a locally authenticated attacker to elevate privileges. Connected sources reference this CVE in the context of Windows TCP/IP and note it as a local-privilege-escalation issue, wit...

CVE-2025-54911

CVE-2025-54911 refers to a use-after-free vulnerability in Windows BitLocker that could allow an authorized, locally present attacker to elevate privileges. The CVE entry notes a high-impact scenario with local attack vector, requiring low privileges and user interaction, per the provided CVSS 3....

CVE-2025-54915

CVE-2025-54915 describes a type-confusion vulnerability in the Windows Defender Firewall Service that could allow a locally authenticated attacker with high privileges to elevate to a higher level of access. The linked sources confirm the CVE exists and cite Defender Firewall Service as the affec...

CVE-2025-55340

CVE-2025-55340 is a Windows Remote Desktop Protocol security feature bypass caused by improper authentication that can enable an authenticated local attacker to bypass a security feature. The vulnerability affects Windows Remote Desktop Protocol and is rated HIGH with a CVSSv3.1 vector of AV:L/AC...

CVE-2025-59502

CVE-2025-59502 describes an issue of uncontrolled resource consumption in Windows Remote Procedure Call that can let an unauthenticated attacker cause a denial of service over the network. The connected documents confirm the vulnerability description across multiple feeds but do not provide concr...

CVE-2025-64658

CVE-2025-64658 is a Windows Shell elevation-of-privilege vulnerability described as a race condition caused by concurrent execution using a shared resource. The available connected documents confirm impact as local privilege escalation for an attacker with local access and low privileges, requiri...

CVE-2026-20816

CVE-2026-20816 is a Windows Installer time-of-check/time-of-use (TOCTOU) race condition that can allow a local user with low privileges to escalate to higher privileges. The connected Nessus entries flag this as affecting Windows Installer and describe the vulnerability as a local privilege escal...

CVE-2026-26154

Technical details about CVE-2026-26154 are not publicly provided in the supplied documents. Monitor official advisories for updates on affected products, impact, and remediation.

CVE-2026-26170

CVE-2026-26170 is a PowerShell elevation of privilege vulnerability described as requiring local access with low privileges and no user interaction. CVSS 3.1 base score 7.8 (HIGH) with high impact on confidentiality, integrity, and availability; exploit code maturity is UNPROVEN. The entry notes ...

CVE-2026-27908

CVE-2026-27908 is a Windows Elevation of Privilege vulnerability in the TDI Translation Driver (tdx.sys). The CVSS 3.1 base score is 7.0 (HIGH) with LOCAL attack vector, HIGH impact to confidentiality, integrity, and availability. Exploitation is deemed UNPROVEN and requires LOW privileges with N...