CVE-2025-55692

Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.

CVE-2025-62573

CVE-2025-62573 is a DirectX Graphics Kernel elevation-of-privilege vulnerability described as a use-after-free in Windows DirectX that enables an authorized, local attacker to obtain elevated privileges. The EUVD and related advisories confirm the issue and map it to a Windows DirectX privilege e...

CVE-2026-21253

CVE-2026-21253 is a Windows vulnerability in the Mailslot File System described as a use-after-free issue that can enable local privilege escalation. The CVE’s CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high attack complexity, and requires low privileges and no user interaction. The...

CVE-2026-25171

Use-after-free in Windows at the level of Windows Authentication Methods allows an authorized attacker to elevate privileges locally. The vulnerability, CVE-2026-25171, is documented as a local privilege escalation in Windows Authentication Methods; exploitation requires the attacker to be locall...

CVE-2026-27927

CVE-2026-27927 is a Windows Projected File System vulnerability described as a race condition due to concurrent execution on a shared resource, enabling an authorized local attacker to elevate privileges. Connected sources (Microsoft MSRC, Red Hat, Netherlands NCSC) corroborate the Windows Projec...

CVE-2026-40413

Technical details about CVE-2026-40413, including affected products, vulnerable components, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor official advisories for updates.

CVE-2026-49795

CVE-2026-49795 is a use-after-free in the Windows Kernel that allows an authorized local attacker to elevate privileges. Affected: Windows kernel code paths implementing kernel objects referenced after free. Root cause: use-after-free leads to arbitrary code execution with SYSTEM privileges; impa...

CVE-2026-49804

CVE-2026-49804 describes a heap-based buffer overflow in the Windows USB Video Driver that can allow an unauthorized attacker to elevate privileges via a physical attack. The vulnerability is characterized by a physical attack vector with low exploit complexity and the need for user interaction, ...

CVE-2026-50327

CVE-2026-50327 is a heap-based buffer overflow in Windows Media that could allow an authorized attacker to execute code locally. Affected components are Windows Media/Windows Media Foundation. The root cause is a heap-based buffer overflow. Mitigation: apply the Microsoft security updates; the CV...

CVE-2026-50362

CVE-2026-50362 is a Windows Resilient File System (ReFS) heap-based buffer overflow that allows local code execution. The issue affects the ReFS code path and, per sources, an unauthorized attacker with local access could run arbitrary code on the target system. Microsoft and corroborating source...

CVE-2026-50401

CVE-2026-50401 describes an information disclosure in the Windows Cloud Files Mini Filter Driver due to an out-of-bounds read. The impact is local and depends on the attacker already having some level of privileges, with a high confidentiality impact reported in the CVE; the advisory notes an aut...

CVE-2026-50422

CVE-2026-50422 is a Windows NTFS vulnerability described as an out-of-bounds read that could let an authenticated, local attacker gain elevated privileges. Affected component: Windows NTFS (NTFS subsystem). Root cause: out-of-bounds read in NTFS code path. Impact: local privilege escalation and p...

CVE-2026-50431

Technical details are not publicly available in the provided documents. Monitor updates from Microsoft (MSRC) and advisories (NCSC, ZDI) for affected products, impact, and remediation related to CVE-2026-50431.

CVE-2026-50449

CVE-2026-50449 is a Windows Runtime use-after-free vulnerability that allows an authorized, local attacker to escalate privileges. Reported impact is local elevation of privileges with CVSS 3.1/3.1 vector: Local, High severity (7.0). Microsoft has released updates (KB5095051, KB5101649, KB5101650...

CVE-2026-50497

CVE-2026-50497 is an off-by-one error in Windows Remote Desktop Protocol that allows an unauthenticated network attacker to disclose information. Public sources in the provided documents identify the affected component as RDP and describe a network-triggered information disclosure, without detail...

CVE-2026-50673

CVE-2026-50673 is a Windows Kernel elevation-of-privilege vulnerability caused by a null pointer dereference. The issue allows an authorized attacker to elevate privileges locally. Public sources confirm details across NVD, MSRC, EUVD, and related advisories, with a CVSSv3.1 vector of LOCAL, HIGH...

CVE-2026-54982

CVE-2026-54982 affects the Windows Reliable Multicast Transport Driver (RMCAST). The issue is an integer underflow in RMCAST that can allow an adjacent-network attacker to execute code on the vulnerable host (remote code execution). CVSS v3.1 indicates high impact with adjacent network exploitati...

CVE-2026-56194

CVE-2026-56194 : Heap-based buffer overflow in Windows Network File System (NFS) can allow an authorized attacker to elevate privileges over a network. Affected component is Windows NFS Server; root cause described as a heap-based overflow in the NFS networking path. The CVE entry indicates privi...

CVE-2026-57083

CVE-2026-57083 : A vulnerability in the Windows Codecs Library (Windows Media Photo Codec) arises from use of an uninitialized resource, enabling a local attacker to disclose information. Documented impact is local information disclosure with a CVSS 3.1/5.5 (Local, Privileges NONE, User Interacti...

CVE-2026-58544

CVE-2026-58544 (Windows Management Services) is a use-after-free vulnerability that enables local privilege escalation by an authorized user. Public references in the initial data indicate an elevated-privilege impact (CVE-2026-58544) with a CVSS v3.1 base score of 7.0 (LOCAL, HIGH impact to conf...

CVE-2026-58629

CVE-2026-58629 is a Windows DirectX vulnerability described as a use-after-free in the DirectX Graphics Kernel that allows a locally authenticated attacker to elevate privileges. The NVD entry notes a local attack vector with high impact (C/H/I/A all high) and the CVSSv3.1 score of 7.0 (Local, Pr...

CVE-2026-58638

CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...

CVE-2026-62807

CVE-2026-62807 affects Windows DHCP Server, with the root cause described as improper link resolution before file access ("link following"). An authenticated local attacker can elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH): Local attack vector, low attack complexity, low privileges re...

CVE-2026-69712

CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...

CVE-2025-49672

Technical details about CVE-2025-49672 are not publicly provided in the supplied documents. No vendor/version specifics or remediation are included. Monitor for updates from Microsoft and CVE references.

CVE-2025-49681

No additional technical details are provided in the connected documents for CVE-2025-49681 beyond the description. Public information about affected software, root cause, impact, or fixes is not included; monitoring recommended.

CVE-2025-49726

CVE-2025-49726 is a Windows vulnerability described as a use-after-free in Windows Notification that allows an authenticated local attacker to escalate privileges. The initial document provides a high-level impact (local, high confidentiality/integrity/availability impact) and does not reveal exp...

CVE-2025-53141

CVE-2025-53141 refers to a null pointer dereference in the Windows Ancillary Function Driver for WinSock that can enable local privilege escalation for an authenticated user. The connected Windows-ecosystem data identifies this CVE as affecting the WinSock ancillary driver with a high base severi...

CVE-2025-62466

CVE-2025-62466 : Windows Client-Side Caching (CSC) Service contains a null pointer dereference vulnerability that allows an authenticated local attacker to escalate privileges . The issue is tied to CSC on Windows and is listed in multiple advisories as a privilege-elevation vulnerability affecti...

CVE-2026-20833

CVE-2026-20833 is a Windows Kerberos information-disclosure vulnerability. An authorized attacker with local access and low privileges can disclose information due to use of a broken or risky cryptographic algorithm in Kerberos. The CVSSv3.1 base score is 5.5 (Medium); attack vector: Local; user ...

CVE-2026-20872

CVE-2026-20872 affects Windows NTLM: external control of a file name or path allows an attacker to spoof authentication over the network. The description states this vulnerability and related references indicate a Windows NTLM spoofing risk. The connected Nessus/NCSC/EUVD/NVD entries confirm the ...

CVE-2026-23671

CVE-2026-23671 is a Windows Bluetooth RFCOM Protocol Driver elevation of privilege vulnerability. A locally exposed issue could allow an attacker with low privileges and no user interaction to escalate privileges via the Bluetooth stack’s RFCOM Protocol Driver; exploitation maturity is UNPROVEN. ...

CVE-2026-26169

CVE-2026-26169 is a Windows Kernel Memory information-disclosure vulnerability described as a buffer over-read that can leak information to an authorized local attacker. The CVE is listed across multiple feeds (NVD/NCSC/EUVD) with the impact described as local information disclosure and a high co...

CVE-2026-26181

CVE-2026-26181 : Microsoft Brokering File System Elevation of Privilege. The CVSS vector (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) yields a base score of 7.8 (HIGH). The vulnerability affects the file system brokering path and is described as an Elevation of P...

CVE-2026-34343

CVE-2026-34343 describes a heap-based buffer overflow in Windows’ Application Identity (AppID) Subsystem that could enable local privilege escalation by an authorized attacker. Documented impact is local, with required privileges LOW and no user interaction, consistent with CVSS v3.1 base metrics...

CVE-2026-34349

CVE-2026-34349 describes a local information disclosure in Windows Media where sensitive data is exposed to an unauthorized actor, potentially enabling a local attacker with low privileges and no user interaction to disclose information. The report notes a CVSSv3.1 base score of 5.5 (Medium), wit...

CVE-2026-42912

The CVE-2026-42912 entry concerns a race condition in the Windows Telephony Service caused by improper synchronization. A local, low-privilege attacker could exploit this vulnerability to elevate privileges on the host (CVSSv3.1: 7.0, HIGH). Affected component: Windows Telephony Service. Root cau...

CVE-2026-45594

CVE-2026-45594 : This vulnerability concerns the Windows Application Identity (AppID) Subsystem , where an exposure of sensitive information to an unauthorized actor enables a local attacker to disclose information. The NVD entry reiterates the issue as a local confidentiality breach (impact: Hig...

CVE-2026-49783

CVE-2026-49783 is a Windows Secure Boot issue described as an improperly implemented security check for the standard, enabling a local attacker with low privileges to bypass a security feature. The CVSS v3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, no user interac...

CVE-2026-50295

Technical details about CVE-2026-50295 are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-50374

CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...

CVE-2026-50376

CVE-2026-50376 is a Windows Remote Desktop Client information disclosure vulnerability caused by use of an uninitialized resource in the Windows RDP client. It enables a network-based attacker to disclose information. The CVE is referenced in multiple feeds (NVD, NCSC, CIRCL) and is addressed by ...

CVE-2026-50424

CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...

CVE-2026-50435

CVE-2026-50435 (Windows Overlay Filter): A buffer over-read in the Windows Overlay Filter enables a locally authenticated attacker to elevate privileges. The exploitation context is local with low attack complexity and no user interaction, and the impact is elevation of privileges with high confi...

CVE-2026-50459

CVE-2026-50459 is a Windows Kernel elevation of privilege vulnerability described as a use-after-free in the Windows kernel that could allow a local attacker to elevate privileges. Public references in the connected documents indicate Microsoft has released updates to address this vulnerability (...

CVE-2026-50505

CVE-2026-50505 is a Windows Message Queuing (MSMQ) remote code execution vulnerability described as a use-after-free in MSMQ that could allow an authorized attacker to execute code over a network. Public sources (MSRC update guidance) confirm updates addressing this issue and advise applying the ...

CVE-2026-56182

CVE-2026-56182 is a Windows NTFS elevation-of-privilege vulnerability caused by an integer overflow/wraparound in NTFS operations that can be exploited by an authorized local attacker. Public sources in the connected data corroborate the root cause and the affected component is NTFS on Windows. T...

CVE-2026-56643

CVE-2026-56643 is a DirectX Graphics Kernel elevation of privilege vulnerability tracked by Microsoft. It stems from a use-after-free in the Windows Kernel’s DirectX Graphics Kernel component, enabling a local attacker with normal privileges to escalate to higher privileges. The vulnerability is ...

CVE-2026-62797

Technical details about CVE-2026-62797 are not publicly available in the provided documents. The descriptions only note a heap-based buffer overflow in Windows NTFS causing local privilege escalation. Monitor for updates.

CVE-2026-62798

CVE-2026-62798 describes an untrusted pointer dereference in Windows Win32K that allows an authorized attacker to disclose information locally. Documents indicate the affected component is Windows Win32K and the vulnerability enables local information disclosure with a CVSS 3.1 base score of 5.5 ...