CVE-2026-24287

CVE-2026-24287 is a Windows kernel elevation-of-privilege vulnerability with a local attack vector. The CVSS 3.1 metrics indicate high impact to confidentiality, integrity, and availability, requiring low privileges and no user interaction, with exploit code maturity marked as UNPROVEN. The issue...

CVE-2026-62742

CVE-2026-62742 describes an integer underflow in the Windows DHCP Server that enables an unauthenticated attacker on an adjacent network to disclose information. The affected component is the Windows DHCP Server service, and the underlying cause is a wrap/wraparound underflow. The documented impa...

CVE-2025-49762

CVE-2025-49762 describes a race condition caused by concurrent access to a shared resource in the Windows Ancillary Function Driver for WinSock, enabling a locally authenticated attacker to escalate privileges. The description explicitly identifies the affected component and the impact as local p...

CVE-2025-50162

CVE-2025-50162 is a Windows RRAS vulnerability described as a heap-based buffer overflow that allows an authenticated attacker to execute code over the network. The RRAS entry in the Windows vulnerability catalog indicates the impact as execution of random code. Microsoft has released updates add...

CVE-2025-53718

Technical details about CVE-2025-53718 are not publicly available in the provided connected documents. No specific product/version/root-cause/impact details are provided here. Monitor future updates from Microsoft and CVE databases for remediation and impact information.

CVE-2025-53725

Technical details about CVE-2025-53725 are not provided in the connected documents. Public exposure, affected components, and fixes are not described here; monitor for updates.

CVE-2025-53797

CVE-2025-53797 is a Windows RRAS information disclosure vulnerability caused by a buffer over-read in RRAS. The CVE description notes a network-exposed flaw that could allow an unauthorized attacker to disclose information, with a CVSS3.1 base score of 6.5 (Network attack vector, no privileges, u...

CVE-2025-54105

CVE-2025-54105 describes a race condition in the Microsoft Brokering File System that can enable local privilege escalation by an authorized attacker. Connected sources confirm a Windows-focused vulnerability and indicate remediation via Microsoft hotpatches and September 2025 security updates (K...

CVE-2025-54894

CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.

CVE-2025-58722

CVE-2025-58722 is a heap-based buffer overflow in Windows DWM that could enable a locally authenticated attacker to elevate privileges. The available connected documents confirm the affected component (Windows DWM) and the local privilege elevation impact, but do not provide concrete exploit deta...

CVE-2025-59188

CVE-2025-59188 is described as an information-disclosure vulnerability in the Windows Failover Cluster that could allow an authorized local attacker to disclose sensitive information. The available connected MS advisories and vulnerability lists indicate this affects Windows Failover Cluster and ...

CVE-2025-60716

CVE-2025-60716 : A use-after-free in Windows DirectX can enable an authorized local attacker to elevate privileges. The affected component is Windows DirectX; root cause is a use-after-free flaw. Impact is local privilege escalation with high potential impact. The provided connected documents do ...

CVE-2025-62452

Technical details about CVE-2025-62452 (heap-based buffer overflow in RRAS) are not publicly provided in the supplied documents. The connected KB/MS documents do not specify affected products/versions, exploit details, or mitigations. Monitor for updates.

CVE-2025-62464

CVE-2025-62464 is a Windows Projected File System Elevation of Privilege vulnerability (buffer over-read) that could allow an authorized local attacker to gain higher privileges. Affected product: Windows Projected File System (ProjFS) components; root cause described as a buffer over-read in Pro...

CVE-2025-62567

CVE-2025-62567 is a Windows Hyper-V Denial of Service vulnerability caused by an integer underflow that can be triggered by a network-based attack from an authorized user. The linked sources classify the impact as Denial of Service with a CVSS v3.1 base score of 5.3 (Network, High attack complexi...

CVE-2026-20865

CVE-2026-20865 is a Windows Management Services use-after-free vulnerability that enables an authenticated, local attacker to achieve elevated privileges. The issue arises from a prior use-after-free in the Windows Management Services component, with exploitation requiring local access and no use...

CVE-2026-20937

CVE-2026-20937 affects Windows File Explorer and is described as an information-disclosure vulnerability allowing a locally authorized attacker to disclose information. The provided documents confirm a Windows File Explorer exposure, with CVSS 3.1/5.5 (Local access, Low attack complexity, High co...

CVE-2026-21240

CVE-2026-21240 describes a local, authenticated TOCTOU race in Windows HTTP.sys that can allow privilege escalation. Affected component: Windows HTTP.sys. Root cause: time-of-check/time-of-use race condition. Impact: high (local escalation of privileges, potential confidentiality, integrity, and ...

CVE-2026-26173

CVE-2026-26173 affects the Windows Ancillary Function Driver for WinSock and is described as a race-condition vulnerability in a shared-resource path that can allow an authenticated local attacker to elevate privileges to SYSTEM. The connected sources confirm this is a Windows elevation-of-privil...

CVE-2026-32082

CVE-2026-32082 is a Windows SSDP Service race condition vulnerability that can enable local privilege escalation. Multiple connected sources confirm the flaw exists in Windows SSDP Service and describe an improper synchronization on a shared resource leading to elevation of privileges for a local...

CVE-2026-48572

CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...

CVE-2026-49180

This CVE concerns the Universal Plug and Play component upnp.dll, where an improper link resolution before file access (link following) can lead to local information disclosure. The entry notes that an authorized attacker can disclose information locally, with a CVSS base score of 5.5 (Medium). A...

CVE-2026-49806

The vulnerability CVE-2026-49806 affects the Windows USB Print Driver and is caused by a race condition from concurrent access to a shared resource due to improper synchronization. This leads to local privilege escalation by an authenticated, local attacker. The CVE’s base metrics indicate a LOCA...

CVE-2026-50296

CVE-2026-50296 is a use-after-free vulnerability in the DirectX Graphics Kernel that allows an authorized, local attacker to elevate privileges. The cited CVSS 3.1 vector is LOCAL, with HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges with no user interacti...

CVE-2026-50303

CVE-2026-50303 describes a vulnerability in Windows Key Guard where use of a cryptographic primitive with a risky implementation enables an authorized local attacker to bypass a security feature. Affected component: Windows Key Guard cryptographic handling; root cause: risky implementation of the...

CVE-2026-50306

CVE-2026-50306 is a Windows TCP/IP use-after-free vulnerability that allows an authorized, local attacker to elevate privileges. Affected component is the Windows TCP/IP stack; impact is local privilege escalation with high severity (CVSS 3.1: 7.8). Microsoft has released updates (KB5095051, KB50...

CVE-2026-50488

CVE-2026-50488 affects Windows Clipboard User Service and is caused by improper neutralization of special elements in a command, enabling local privilege escalation for an authorized attacker. The CVSS v3.1 vector indicates local access, low attack complexity and privileges, with high impact to c...

CVE-2026-57979

CVE-2026-57979 describes an out-of-bounds read in Windows Remote Desktop Protocol (RDP) that could allow an unauthenticated or network-attached attacker to disclose information over the network. Publicly referenced sources (NVD, MSRC updates, ENISA EUVD, and security advisories) corroborate an in...

CVE-2026-80096

CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...

CVE-2025-53133

CVE-2025-53133 is a Windows PrintWorkflowUserSvc use-after-free vulnerability that enables local privilege escalation for an authorized user. The initial description and multiple connected sources align on a Windows kernel/user-mode interaction where a mismanagement of resources in PrintWorkflowU...

CVE-2025-53798

CVE-2025-53798 affects Windows Routing and Remote Access Service (RRAS). The connected sources confirm a buffer over-read that enables an unauthenticated attacker to disclose information over the network (CVE-2025-53798; CVSS v3.1 base score 6.5, network vector, low attack complexity, no privileg...

CVE-2025-53802

Technical details about CVE-2025-53802 (affected components, root cause, versions, exploitability, and fixes) are not publicly provided in the supplied connected documents. Monitor for updates from Microsoft advisories and MSRC for remediation specifics.

CVE-2025-54115

Technical details about CVE-2025-54115 are not publicly provided in the connected documents. Based on the initial description, no product/version specifics or mitigation are given; monitor for updates.

CVE-2025-58720

CVE-2025-58720 (Windows Cryptographic Services) has concrete details in connected docs. The vulnerability arises from using a cryptographic primitive with a risky implementation in Windows Cryptographic Services, enabling an authenticated local attacker to disclose information. The vulnerability ...

CVE-2025-59215

CVE-2025-59215 is a Windows Graphics Component elevation-of-privilege vulnerability. Multiple sources describe a use-after-free/resource-management error in the Microsoft Graphics Component that can allow an authenticated, local attacker to obtain higher privileges. The NVD entry notes local priv...

CVE-2025-59512

Technical details about CVE-2025-59512, including affected product, root cause, exploitability or remediation, are not publicly provided in the supplied Connected Documents. Monitor for official updates (mitigations/patches) as newer MSKBs may cover this CVE.

CVE-2026-20808

CVE-2026-20808 is a Windows local privilege escalation vulnerability in the Printer Association Object caused by concurrent execution on a shared resource without proper synchronization. An authenticated, locally privileged user can exploit this race condition to elevate privileges. Affected soft...

CVE-2026-24285

Technical details about CVE-2026-24285 are not provided in the given documents. Monitor for updates from Microsoft and CVE records for affected products, impact, and mitigations.

CVE-2026-25185

Technical details (affected products, components, root cause, impact, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-27914

CVE-2026-27914 affects the Microsoft Management Console (MMC). It is an Elevation of Privilege vulnerability where a local attacker with low privileges and no user interaction can potentially gain high impact on confidentiality, integrity, and availability due to the underlying root cause describ...

CVE-2026-32076

CVE-2026-32076 describes an out-of-bounds read in the Windows Storage Spaces Controller that enables an authorized local attacker to elevate privileges. The vulnerability is tied to the Storage Spaces Controller component and is documented across multiple sources (NVD/NVD-affiliated listings, Red...

CVE-2026-32089

Summary: CVE-2026-32089 is a local elevation-of-privilege vulnerability in Windows Speech Brokered API (Speech Brokered Api) described as a use-after-free issue. The vulnerability can be exploited by an authorized attacker to gain higher privileges on a vulnerable Windows host. Connected advisori...

CVE-2026-45588

CVE-2026-45588 concerns a protection mechanism failure in Windows Secure Boot that allows an authorized attacker to bypass a security feature locally. The NVD/CVE entry describes a local attack with high impact on confidentiality and integrity and no availability impact, requiring high privileges...

CVE-2026-50299

The CVE-2026-50299 entry describes an integer overflow/wraparound in Windows Storage Spaces Direct. Affected component: Storage Spaces Direct (Windows). Root cause: integer overflow allowing an unauthorized attacker to execute code. Impact: code execution with a physical attack vector; CVSS vecto...

CVE-2026-50347

CVE-2026-50347 is a Windows Data.dll vulnerability characterized by a heap-based buffer overflow that allows an unauthorized, local attacker to execute code. The affected component is Windows Data.dll; the underlying issue is a heap overflow leading to remote-code-execution-style impact via local...

CVE-2026-50456

CVE-2026-50456 is a Windows File Explorer information disclosure vulnerability. A local attacker with low privileges and no user interaction can access sensitive information due to the underlying issue in Windows File Explorer. The CVSS.3.1 score is 5.5 (Medium), with attack vector Local, impact...

CVE-2026-50685

CVE-2026-50685 is a Windows DHCP Server Remote Code Execution vulnerability caused by a double-free in the DHCP Server component. It is network-exploitable (no user interaction) and rated by Microsoft as an in-scope issue with high impact (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; CVSS v3.1 base 7.5)....

CVE-2026-54991

CVE-2026-54991 describes a race condition in the Windows USB Print Driver caused by concurrent execution with improper synchronization. The issue allows a local, authorized attacker to elevate privileges. Documents do not provide exploit details or affected version ranges beyond the Windows USB P...

CVE-2026-56168

CVE-2026-56168 : Null pointer dereference in Windows SMB Server can allow an authorized attacker to cause a Network-based Denial of Service. It targets the Windows SMB Server component and has a CVSS v3.1 base vector of Network, Low Attack Complexity, Privileges Required: Low, No User Interaction...

CVE-2026-56189

CVE-2026-56189 is a local, heap-based buffer overflow in Microsoft Windows Media Foundation. The affected component is Windows Media Foundation within Windows, and the vulnerability allows an unauthenticated local attacker to execute arbitrary code. The root cause is a heap-based overflow in the ...