CVE-2026-50329

CVE-2026-50329 is a Windows DWM Core Library elevation-of-privilege vulnerability rooted in a use-after-free in the Windows kernel. The available connected sources confirm the affected component as Windows DWM Core Library (Windows Kernel) and describe local privilege escalation possible by an au...

CVE-2025-59275

CVE-2025-59275 involves Windows Authentication Methods with improper validation of a specified input type, enabling an authorized local attacker to escalate privileges. The connected EUVD-2025-34271 entry corroborates the same description. No technical details about affected product versions, roo...

CVE-2025-60703

Technical details about CVE-2025-60703 are not provided in the initial or connected documents. Monitor for updates as more specifics (affected product/version, root cause, mitigations) may be published.

CVE-2026-20816

CVE-2026-20816 is a Windows Installer time-of-check/time-of-use (TOCTOU) race condition that can allow a local user with low privileges to escalate to higher privileges. The connected Nessus entries flag this as affecting Windows Installer and describe the vulnerability as a local privilege escal...

CVE-2026-20822

CVE-2026-20822 is a Microsoft Windows graphics subsystem elevation-of-privilege vulnerability in the Microsoft Graphics Component caused by a use-after-free condition. It enables a locally authenticated attacker to elevate privileges on the host. The CVSS vector (Local, High complexity, Low privi...

CVE-2026-20927

CVE-2026-20927 affects Windows SMB Server and is described as a race-condition in a shared resource that can allow an authorized attacker to cause a denial of service over the network. The connected Nessus NASL entries list this CVE under Windows SMB Server with a 5.3 base score (Denial-of-Servic...

CVE-2026-26170

CVE-2026-26170 is a PowerShell elevation of privilege vulnerability described as requiring local access with low privileges and no user interaction. CVSS 3.1 base score 7.8 (HIGH) with high impact on confidentiality, integrity, and availability; exploit code maturity is UNPROVEN. The entry notes ...

CVE-2026-27916

CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...

CVE-2026-32156

CVE-2026-32156 is a use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host (upnp.dll) that allows a local, unauthorized attacker to execute code on the system. The connected sources confirm the issue affects Windows UPnP Device Host and list it among UPnP-related C...

CVE-2026-34341

CVE-2026-34341 is a Windows LLDP (Link-Layer Discovery Protocol) vulnerability described as a double free in LLDP that allows an authenticated, local attacker to gain elevated privileges. The connected documents confirm the issue and impact (local privilege escalation) but do not provide concrete...

CVE-2026-40401

CVE-2026-40401 describes a null pointer dereference in Windows TCP/IP that can be exploited for local denial of service by an unauthorized attacker. The description in the sources states the vulnerability allows a local, unauthenticated denial of service, with a CVSS v3.1 base score of 7.1 (HIGH)...

CVE-2026-41095

This CVE is a local privilege escalation caused by a use-after-free in Windows Data Deduplication. The description identifies a vulnerability that an authorized attacker could exploit locally to gain higher privileges. The connected sources document the flaw in the Data Deduplication component an...

CVE-2026-42973

Technical details (affected software, conditions, exploitability, and remediation) are not publicly available in the provided documents; monitor for updates.

CVE-2026-49174

CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...

CVE-2026-50313

CVE-2026-50313 is a Windows NTFS heap-based buffer overflow vulnerability that could allow an attacker to achieve local code execution. The CVE entry describes a heap-based overflow in NTFS that enables exploitation by a privileged/unauthenticated attacker with local access, with the NVD entry al...

CVE-2026-50353

CVE-2026-50353 is a Windows DirectX kernel issue (DirectX Graphics Kernel) caused by a use-after-free in DirectX that enables a locally authenticated attacker to elevate privileges. The CVSS v3.1 base score is 7.8 (High) with LOCAL attack vector, LOW attack complexity, and NO user interaction req...

CVE-2026-50354

CVE-2026-50354 involves a use-after-free in the Windows Kernel that enables an authorized local attacker to elevate privileges. The affected source is the Windows Kernel; the vulnerability stems from memory management misuse leading to arbitrary code execution with SYSTEM-level privileges. Exploi...

CVE-2026-50355

CVE-2026-50355 is a vulnerability in Active Directory Federation Services (AD FS) described as a stack-based buffer overflow that enables a remote, unauthenticated attacker to cause a denial of service over the network. The CVSS v3.1 base score is 7.5 (Network, Low attack complexity, No privilege...

CVE-2026-50409

CVE-2026-50409 affects the Windows Overlay Filter. The issue is an information disclosure where an authorized attacker can locally access sensitive information exposed by the Overlay Filter. The base CVSS v3.1 is 5.5 (Local, Low Attack Complexity, Low Privileges) with High confidentiality impact....

CVE-2026-50412

CVE-2026-50412 is a Windows NTFS elevation-of-privilege vulnerability caused by a stack-based buffer overflow. The affected component is NTFS in Windows, allowing an authorized local attacker with low privileges and no user interaction to gain SYSTEM-level privileges (base CVSS v3.1: 7.8, Local, ...

CVE-2026-50432

CVE-2026-50432 describes a Use-after-free vulnerability in the Windows Virtual Filtering Platform (VFP) . An authenticated attacker could trigger a denial-of-service condition over the network by exploiting this flaw in the VFP code path, as indicated by the CVE entry: AV:N/AC:H/PR:L/UI:N/S:U/C:N...

CVE-2026-50469

CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...

CVE-2026-50496

CVE-2026-50496 is an out-of-bounds read vulnerability in Windows Network Policy Server SNMP that allows an unauthenticated attacker to disclose information over the network. Affects the SNMP component of Windows NPS; impact is information disclosure with a CVSS v3.1 base score of 7.5 (Network att...

CVE-2026-54122

CVE-2026-54122 describes a heap-based buffer overflow in Windows GDI+ that enables local code execution by an unauthenticated attacker. The vulnerability affects the Windows GDI+ component and is rated high (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.4). The available documents confirm the ...

CVE-2026-58601

CVE-2026-58601 describes a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized, local attacker to elevate privileges. The available description specifies a local-privelege-escalation impact, but does not provide product/version specifics, exploitati...

CVE-2025-47987

Technical details of CVE-2025-47987 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2025-48811

CVE-2025-48811 affects Windows Virtualization-Based Security (VBS) Enclave, with the root cause described as missing integrity check in the Enclave. The NCSC advisory lists this CVE as impacting Windows VBS Enclave and notes an ability to obtain increased privileges. The entry indicates that Micr...

CVE-2025-49658

CVE-2025-49658 is an information-disclosure vulnerability in Windows that arises from an out-of-bounds read in the TDX.sys driver. Impact: an authenticated, local attacker with LOW privileges could disclose sensitive data (C: HIGH, I: NONE, A: NONE; CVSS 5.5/LOCAL). Affected component: Windows Tr...

CVE-2025-53720

Technical details about CVE-2025-53720 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; current entries reference RRAS vulnerability but lack affected versions, exploit information, or mitigations in these sources.

CVE-2025-55681

CVE-2025-55681 is an out-of-bounds read vulnerability in Windows DWM (Desktop Window Manager) that allows an authenticated, locally-present attacker to elevate privileges. The connected EUVD-2025-34414 entry corroborates that the flaw is in the Windows DWM and leads to local privilege escalation....

CVE-2026-32072

CVE-2026-32072 corresponds to an unauthenticated spoofing vulnerability in Windows Active Directory (local access). The Red Hat and NCSC entries corroborate the flaw as an AD authentication issue with local spoofing potential. Public documentation lists this CVE under Windows Active Directory wit...

CVE-2026-50359

CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...

CVE-2026-50370

CVE-2026-50370 is a heap-based buffer overflow in the Windows DHCP Server service that could allow an unauthenticated attacker on an adjacent network to execute code. The vulnerability is listed among the July 2026 Patch Tuesday disclosures and is included in Microsoft’s security updates (KB50995...

CVE-2026-50371

CVE-2026-50371 affects Windows LUAFV (Windows LUAFV driver). The issue is a race condition due to concurrent access to a shared resource without proper synchronization, enabling an authorized local attacker to elevate privileges. Microsoft has released updates addressing this family of vulnerabil...

CVE-2026-50373

CVE-2026-50373 affects the Microsoft Windows Search Component (Windows Search Service). It enables local elevation of privileges via improper access control. Microsoft has released updates (e.g., KB5101650 and MSRC guidance) to address the vulnerability; apply the available security updates to mi...

CVE-2026-50683

CVE-2026-50683 is a Windows DHCP Client/Server heap-based buffer overflow that enables an authenticated attacker on an adjacent network to elevate privileges. Public details in the initial entry cite a heap-based overflow and adjacent-access attack path with high impact (C:H, I:H, A:H) and a CVSS...

CVE-2026-54127

CVE-2026-54127 describes a use-after-free vulnerability in Windows Hyper-V that enables a local elevation of privileges. The CVSS 3.1 vector indicates a local attack, high impact on confidentiality, integrity, and availability, with no user interaction required and no privileges needed. The conne...

CVE-2026-61357

CVE-2026-61357 is described as a use-after-free in Application Information Services that allows an authorized attacker to locally elevate privileges. The available data indicate a local attack vector with low privilege required and no user interaction, resulting in high impact to confidentiality,...

CVE-2026-62699

The CVE-2026-62699 entry concerns the Windows Universal Disk Format File System Driver (UDFS). It describes a heap-based buffer overflow in UDFS that permits code execution by an unauthenticated attacker with physical access to the system. Affected component: UDFS in Windows. Root cause: heap-bas...

CVE-2026-62739

CVE-2026-62739 is a Windows component (HTTP.sys) vulnerability described as a heap-based buffer overflow that allows an authenticated, local attacker to achieve privilege escalation. The CVSS 3.1 assessment indicates local access with low attack complexity and low privileges required, but with hi...

CVE-2026-62740

CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...

CVE-2026-65671

The CVE-2026-65671 entry describes a heap-based buffer overflow in Windows Remote Access API that allows an authorized attacker to achieve local privilege escalation. The impact is indicated as high (CVSSv3.1 base score 7.8) with local access required and no user interaction. Public details in th...

CVE-2026-69276

CVE-2026-69276 is an integer underflow (wrap or wraparound) in the Microsoft UxTheme Library (uxtheme.dll) that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) , reflecting network-based attack vector with no privileges or us...

CVE-2025-47976

Technical details beyond the high-level description are not provided in the supplied documents. No affected product versions, exploit details, or remediation are stated here. Monitor for updates from official advisories.

CVE-2025-48001

Technical details about CVE-2025-48001 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are present. Monitor for updates from vendors and security advisories.

CVE-2025-48810

CVE-2025-48810 : Windows Secure Kernel Mode information disclosure via processor optimization/removal or modification of security-critical code. Affects Windows Secure Kernel Mode; CVE entry indicates local (L) access, with low privileges required and no user interaction, and a base score of 5.5 ...

CVE-2025-48823

CVE-2025-48823: Windows Cryptographic Services vulnerability allowing an unauthenticated network attacker to disclose information. Connected data lists CVSS v3.1 base score 5.9 (Medium) with Confidentiality Impact high and no listed impact on integrity/availability. The only explicit detail in so...

CVE-2025-49669

Technical details about CVE-2025-49669 are not provided in the connected documents. The initial description mentions a heap-based overflow in RRAS but no specific product/version/root-cause/fix details are included here. Monitor for updates.

CVE-2025-49675

Technical details (affected product, exploit specifics, root cause) are not provided in the connected documents. Monitor for official CVE disclosures and vendor advisories for concrete remediation and impact.

CVE-2025-53132

Technical details for CVE-2025-53132 (Windows Win32K GRFX race condition privilege escalation) are not provided in the connected documents. Public specifics (affected versions, exploit details, or fixes) are not available here; monitor for updates from official advisories.