CVE-2026-50361

CVE-2026-50361 describes a double free in Microsoft Brokering File System leading to local privilege elevation for an authenticated attacker. The vulnerability affects the Brokering File System component and is triggered via improper memory management that can allow an attacker with local access ...

CVE-2025-54114

CVE-2025-54114 corresponds to a race condition in the Windows Connected Devices Platform Service caused by concurrent execution sharing a resource. The primary CVE description states it could allow an authorized attacker to elevate privileges locally, while NCSC’s vulnerability table also flags D...

CVE-2026-20852

CVE-2026-20852 is a Windows Hello privilege-assignment vulnerability that enables a locally authenticated attacker to tamper with local data due to incorrect privilege handling in the Windows Hello component. The issue is labeled as a local, high-severity problem with no user interaction required...

CVE-2026-26111

Summary: CVE-2026-26111 is a Windows RRAS (Routing and Remote Access Service) vulnerability caused by an integer overflow/wraparound that could allow a network-based attacker to perform remote code execution. The CVSSv3.1 base metrics indicate high severity (8.0 base score in the CVE entry; relat...

CVE-2026-26178

CVE-2026-26178 is a Windows Advanced Rasterization Platform Elevation of Privilege vulnerability with CVSS v3.1 base score 8.8 (HIGH). The issue is exploitable via NETWORK with LOW attack complexity and NONE privileges required, but it requires user interaction. Impact is rated HIGH for confident...

CVE-2026-32068

CVE-2026-32068 impacts Windows SSDP service, enabling local elevation of privilege via the Simple Search and Discovery Protocol. The issue is local, requires low privileges, and does not require user interaction. CVSS v3.1 base score 7.0 (HIGH) with HIGH impact on confidentiality, integrity, and ...

CVE-2026-32170

Technical details for CVE-2026-32170 are not publicly available in the provided documents beyond the basic description. No vendor, product, version, root cause, impact, or fix specifics are supplied here. Monitor official disclosures and CVE/Microsoft update guidance for updates.

CVE-2026-34330

Technical details about CVE-2026-34330 (Win32K GRFX integer overflow leading to local privilege elevation) are not publicly provided in the supplied connected documents. Please monitor official advisories (MSRC/NVD) for affected products, impact, and fixes.

CVE-2026-34334

Technical details (affected component, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2026-34347

Technical details about CVE-2026-34347 are not publicly provided in the connected documents. The initial description notes a use-after-free in Windows Win32K GRFX enabling local privilege elevation, but no patch/version specifics are included in the supplied materials.

CVE-2026-35416

CVE-2026-35416 describes a local privilege escalation due to a use-after-free in the Windows Ancillary Function Driver for WinSock. The description in the connected documents confirms the vulnerable component and the root cause as a use-after-free, leading to elevation of privileges for an author...

CVE-2026-40413

Technical details about CVE-2026-40413, including affected products, vulnerable components, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor official advisories for updates.

CVE-2026-50373

CVE-2026-50373 affects the Microsoft Windows Search Component (Windows Search Service). It enables local elevation of privileges via improper access control. Microsoft has released updates (e.g., KB5101650 and MSRC guidance) to address the vulnerability; apply the available security updates to mi...

CVE-2026-50415

CVE-2026-50415 affects Windows Media. The issue is exposure of sensitive information to an unauthorized actor over a network, enabling information disclosure. NVD and other sources describe a network-available impact with high confidentiality impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

CVE-2026-50418

CVE-2026-50418 describes an improper access control issue in Windows systems that allows an unauthorized, local attacker to bypass a security feature. The vulnerability affects the Windows System Secure Feature and is labeled as a local, low-complexity bypass with a base CVSS v3.1 score of 5.1 (I...

CVE-2026-50681

CVE-2026-50681 is a Windows Secure Channel information disclosure vulnerability in Windows Cryptographic Services. The available documents describe exposure of sensitive information to an unauthorized actor, allowing a locally authenticated attacker to disclose data. Connected sources confirm the...

CVE-2026-61355

A heap-based buffer overflow in Windows Sensor Data Service allows an authorized local attacker to elevate privileges. Affected component: Windows Sensor Data Service. Vulnerability type: heap-based overflow. Impact: elevated local privileges with high confidentiality, integrity, and availability...

CVE-2026-61920

CVE-2026-61920 – Windows DNS Server : A race condition caused by improper synchronization on a shared resource enables an authorized attacker to execute code over a network. Affected product: Windows DNS Server. Root cause: concurrent execution due to lack of proper synchronization in the shared ...

CVE-2026-62721

Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-62747

CVE-2026-62747 is a heap-based buffer overflow in Windows Device Association Service that enables a locally authenticated attacker to elevate privileges. Exploit details are not provided in the connected documents, and no specific patch/version is listed here; CVSS v3.1 base score is 7.8 ( HIGH )...

CVE-2026-62751

CVE-2026-62751 describes an integer overflow or wraparound in Windows Projected File System that enables a locally authenticated attacker to elevate privileges. The entry cites a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required as LOW; im...

CVE-2026-62779

Windows Schannel contains a use-after-free vulnerability that enables an authenticated, local attacker to elevate privileges. Affected component is Schannel in Windows; root cause is a use-after-free defect leading to local privilege escalation. The public records do not specify patches or fixed ...

CVE-2026-62885

CVE-2026-62885 describes a heap-based buffer overflow in Windows Win32K that allows an authorized attacker to perform a local privilege escalation . The vulnerability is tied to the Win32K subsystem; the specific code path and vulnerable component are not further detailed in the provided document...

CVE-2026-70304

Windows DNS contains a heap-based buffer overflow exploitable by an authorized local attacker to elevate privileges. NVD rates it HIGH (7.8, PR:L); Microsoft's CVSS rates MEDIUM (6.7, PR:H). No in-the-wild exploitation reported. Patch via August 2026 Microsoft security updates (KB5121000, KB51202...

CVE-2026-70346

CVE-2026-70346 is a Windows Installer vulnerability: a stack-based buffer overflow could allow an authorized, local attacker to elevate privileges. The description indicates local execution with high impact, but the documents do not provide exploit details or a remediation/patch. Exploitation sta...

CVE-2025-49672

Technical details about CVE-2025-49672 are not publicly provided in the supplied documents. No vendor/version specifics or remediation are included. Monitor for updates from Microsoft and CVE references.

CVE-2025-49687

Technical details about CVE-2025-49687 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates and advisories.

CVE-2025-50168

CVE-2025-50168 is a local privilege-escalation vulnerability in Windows Win32K ICOMP caused by a type-confusion in resource access. The issue affects Win32K-ICOMP and can lead to elevated privileges for an authorized local attacker. Microsoft released August 2025 security updates that fix this vu...

CVE-2025-53145

CVE-2025-53145 is tracked as a Windows Message Queuing (MSMQ) remote code execution vulnerability. The connected data list it under Windows MSMQ with impact: Execute code (high severity, CVSS ~8.8/10) and references indicate MSMQ-related fixes were shipped in August 2025 security updates (KBs and...

CVE-2025-53796

CVE-2025-53796 — Windows RRAS buffer over-read that allows an unauthenticated, network-based disclosure of information. The initial description confirms a network disclosure risk via RRAS; connected documents reference Microsoft security guidance and a vulnerability entry but do not provide concr...

CVE-2025-54099

CVE-2025-54099 affects the Windows Ancillary Function Driver for WinSock. The issue is a stack-based buffer overflow that can be exploited by an authorized, locally-located attacker to obtain elevated privileges. The connected NCSC advisory corroborates the CVE’s association with privilege escala...

CVE-2025-54112

CVE-2025-54112 is a local privilege escalation in the Microsoft Virtual Hard Drive caused by a use-after-free, enabling an authenticated attacker to obtain higher privileges on affected Windows systems. The connected sources (including the NCSC advisory and the CVE table for Windows Hyper-V) cate...

CVE-2025-55326

CVE-2025-55326 is a Windows Cdpsvc (Connected Devices Platform Service) use-after-free vulnerability enabling remote code execution over a network. The provided connected documents confirm the issue, its network vector and a high risk (CVSS 3.1: 7.5, network attack, no privileges). Remediation in...

CVE-2025-55682

CVE-2025-55682 : A vulnerability in Windows BitLocker where the behavioral workflow is improperly enforced could allow an attacker with physical access to bypass the BitLocker security feature. The connected official advisory KB5066835 notes this issue and lists fixes for OS builds 26200.6899 and...

CVE-2025-59277

CVE-2025-59277 involves improper validation of a specified input type in Windows Authentication Methods, enabling a locally authenticated attacker to elevate privileges. Connected MSKBs and EUVD-2025-34369 corroborate the Windows Authentication Methods focus and local privilege escalation risk. T...

CVE-2025-62456

CVE-2025-62456 is a remote code execution vulnerability in the Windows Resilient File System (ReFS) caused by a heap-based buffer overflow. An authenticated attacker could run arbitrary code over the network on affected Windows systems. The NVD entry and Microsoft advisories confirm this CVE targ...

CVE-2026-23674

CVE-2026-23674 relates to Windows MapUrlToZone: improper resolution of path equivalence allows a network-based bypass of a security feature. Affected component is the MapUrlToZone path resolution logic in Windows, with exploitation possible over the network and no user interaction required beyond...

CVE-2026-26152

CVE-2026-26152 pertains to Microsoft Cryptographic Services with a local elevation-of-privilege vulnerability. The CVSS 3.1 vector indicates local access, high impact on confidentiality, integrity, and availability, with user interaction not required. PrivilegesRequired is LOW, AttackComplexity i...

CVE-2026-26176

Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.

CVE-2026-27917

CVE-2026-27917 is a use-after-free vulnerability in the Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) that can elevate privileges locally. Connected documents confirm the issue and its root cause (memory corruption via use-after-free) and indicate that Microsoft released fixes (e.g., K...

CVE-2026-27918

CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...

CVE-2026-27919

CVE-2026-27919 is a Windows UPnP Device Host elevation-of-privilege vulnerability. It is a local attack with low privileges required and no user interaction, carrying a CVSS v3.1 base score of 7.8 (High). The impact spans confidentiality, integrity, and availability (all High). The exploitation m...

CVE-2026-34341

CVE-2026-34341 is a Windows LLDP (Link-Layer Discovery Protocol) vulnerability described as a double free in LLDP that allows an authenticated, local attacker to gain elevated privileges. The connected documents confirm the issue and impact (local privilege escalation) but do not provide concrete...

CVE-2026-41087

CVE-2026-41087 affects Windows File Explorer; a local attacker can cause exposure of sensitive information to obtain disclosure on the host. The vulnerability is rated CVSSv3.1: 5.5 (Medium) with Local access, Low attack complexity, Privileges Required: Low, no user interaction, and Confidentiali...

CVE-2026-41108

CVE-2026-41108 is a heap-based buffer overflow in the Microsoft Windows DNS Client that allows an authorized, local attacker to perform privilege escalation. Affected component: Windows DNS client functionality (DNS resolution path); root cause: heap-based overflow leading to elevation of privile...

CVE-2026-50329

CVE-2026-50329 is a Windows DWM Core Library elevation-of-privilege vulnerability rooted in a use-after-free in the Windows kernel. The available connected sources confirm the affected component as Windows DWM Core Library (Windows Kernel) and describe local privilege escalation possible by an au...

CVE-2026-50372

CVE-2026-50372 — Windows Redirected Drive Buffering : A buffer over-read vulnerability in Windows Redirected Drive Buffering could allow an authorized, local attacker to elevate privileges. The CVE is corroborated by multiple sources (NVD, MSRC, EUVD/ENISA, CIRCL sighting) with an incident descri...

CVE-2026-50439

CVE-2026-50439 affects Microsoft Message Queuing Queue Manager. Description and connected records confirm a use-after-free vulnerability that allows an unauthenticated attacker to execute code remotely over a network. Impact is described as remote code execution with high-severity CVSS in public ...

CVE-2026-54114

CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...

CVE-2026-58544

CVE-2026-58544 (Windows Management Services) is a use-after-free vulnerability that enables local privilege escalation by an authorized user. Public references in the initial data indicate an elevated-privilege impact (CVE-2026-58544) with a CVSS v3.1 base score of 7.0 (LOCAL, HIGH impact to conf...