CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2025-59216

CVE-2025-59216 concerns Microsoft Graphics Component, a graphics driver component. The vulnerability arises from a race-condition caused by improper synchronization when accessing a shared resource, enabling a local attacker with low privileges to elevate privileges. Public sources describe the i...

CVE-2026-25186

Technical details not publicly available in the provided documents. Monitor for updates.

CVE-2026-26161

Technical details such as affected product/component, root cause, impact specifics, or available remediation are not provided in the supplied documents. Monitor official CVE and vendor advisories for updates.

CVE-2026-26163

CVE-2026-26163 is a Windows Kernel elevation-of-privilege vulnerability described as a double free allowing an authorized local attacker to escalate privileges. Connected sources confirm the affected surface is Windows Kernel and the issue enables local privilege escalation with high impact. The ...

CVE-2026-32089

Summary: CVE-2026-32089 is a local elevation-of-privilege vulnerability in Windows Speech Brokered API (Speech Brokered Api) described as a use-after-free issue. The vulnerability can be exploited by an authorized attacker to gain higher privileges on a vulnerable Windows host. Connected advisori...

CVE-2026-32152

CVE-2026-32152 is a use-after-free in Desktop Window Manager that allows an authenticated, local attacker to elevate privileges. Microsoft has issued multiple security updates addressing this vulnerability across Windows SKUs (e.g., KB5082142 for Server 2022, KB5082052 for Windows 11 23H2, KB5083...

CVE-2026-32219

CVE-2026-32219 is a Microsoft-related local privilege escalation in the brokering file system. The entry cites a local attack vector with high impact on confidentiality, integrity, and availability, requiring low privileges and no user interaction; exploitation is marked as UNPROVEN and the remed...

CVE-2026-50298

CVE-2026-50298 concerns Windows Spaceport.sys: an integer overflow/wraparound vulnerability in the kernel component that could allow an unauthenticated, physical attacker to achieve privilege escalation. Affected software is Windows kernel-space Spaceport.sys; impact is elevation of privileges wi...

CVE-2026-50306

CVE-2026-50306 is a Windows TCP/IP use-after-free vulnerability that allows an authorized, local attacker to elevate privileges. Affected component is the Windows TCP/IP stack; impact is local privilege escalation with high severity (CVSS 3.1: 7.8). Microsoft has released updates (KB5095051, KB50...

CVE-2026-50355

CVE-2026-50355 is a vulnerability in Active Directory Federation Services (AD FS) described as a stack-based buffer overflow that enables a remote, unauthenticated attacker to cause a denial of service over the network. The CVSS v3.1 base score is 7.5 (Network, Low attack complexity, No privilege...

CVE-2026-50374

CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...

CVE-2026-50385

CVE-2026-50385 affects Windows Runtime. The issue is a race-condition in a shared resource during concurrent execution, enabling a locally authenticated attacker to elevate privileges. Public details in connected sources confirm the vulnerability, its local privilege-escalation impact, and the Wi...

CVE-2026-50421

CVE-2026-50421 is a Windows vulnerability in Windows Connected User Experiences and Telemetry described as a local privilege escalation via a resource access type confusion. The CVE entry is supported by multiple records: NVD/NCSC/CIRCL indicate the issue and Microsoft has released updates to add...

CVE-2026-50476

Microsoft Windows CVE-2026-50476 is a local privilege-escalation vulnerability in the Windows Network Connections Service caused by a use-after-free. Affected component is the Windows Network Connections Service; root cause is a use-after-free condition that enables an authorized attacker to elev...

CVE-2026-50478

CVE-2026-50478 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry cites a Windows Kernel UAF issue with a high overall impact (CVSS v3.1: 7.8, Local, Privilege Escalation, Integrity/Confidentiality/Availability: High). Con...

CVE-2026-50488

CVE-2026-50488 affects Windows Clipboard User Service and is caused by improper neutralization of special elements in a command, enabling local privilege escalation for an authorized attacker. The CVSS v3.1 vector indicates local access, low attack complexity and privileges, with high impact to c...

CVE-2026-50501

CVE-2026-50501 is a Windows ReFS (Resilient File System) vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code. The CVE is associated with a high impact (CVSS v3.1 base score 7.8, Local attack, no privileges, user interaction required) and is tracke...

CVE-2026-54991

CVE-2026-54991 describes a race condition in the Windows USB Print Driver caused by concurrent execution with improper synchronization. The issue allows a local, authorized attacker to elevate privileges. Documents do not provide exploit details or affected version ranges beyond the Windows USB P...

CVE-2026-57084

CVE-2026-57084 affects Windows File Explorer. Description: a use of an uninitialized resource leads to local information disclosure. CVSSv3.1 base score 5.5 (Medium); attack vector LOCAL, required user interaction, no confidentiality integrity or availability impact beyond disclosure per provided...

CVE-2026-62742

CVE-2026-62742 describes an integer underflow in the Windows DHCP Server that enables an unauthenticated attacker on an adjacent network to disclose information. The affected component is the Windows DHCP Server service, and the underlying cause is a wrap/wraparound underflow. The documented impa...

CVE-2026-62807

CVE-2026-62807 affects Windows DHCP Server, with the root cause described as improper link resolution before file access ("link following"). An authenticated local attacker can elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH): Local attack vector, low attack complexity, low privileges re...

CVE-2025-53135

CVE-2025-53135 is a race-condition based local privilege-escalation in the Windows DirectX graphics stack. Public description indicates concurrent execution on a shared resource allows an authorized, locally authenticated user to elevate privileges. The CVE is listed in Windows DirectX entries as...

CVE-2025-62474

CVE-2025-62474 is a Windows Remote Access Connection Manager Elevation of Privilege vulnerability. It involves improper access control in the Remote Access Connection Manager, enabling a locally authenticated attacker (low privileges, no user interaction) to obtain elevated rights. CVSS v3.1 base...

CVE-2026-21222

CVE-2026-21222 is a Windows Kernel information-disclosure vulnerability where insertion of sensitive data into a kernel log file could allow a locally authenticated attacker with LOW privileges to read sensitive data (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The connected sources confirm t...

CVE-2026-26162

CVE-2026-26162 is a Windows OLE vulnerability described as a type-confusion in resource access that enables a locally authenticated attacker to elevate privileges. The Red Hat and NVD/NCSC entries confirm the same issue, with Microsoft’s MSRC entry associating it to Windows OLE and listing Window...

CVE-2026-32215

CVE-2026-32215 is a Windows Kernel information-disclosure vulnerability caused by insertion of sensitive data into a log file, enabling an authenticated, local attacker to disclose information. Affected component is the Windows Kernel logging path; the described impact is local confidentiality br...

CVE-2026-49171

The CVE-2026-49171 entry describes a Use-After-Free vulnerability in Windows Speech Runtime that enables a locally authenticated attacker to elevate privileges. Affected: Microsoft Windows Speech Runtime components; root cause: use-after-free leading to arbitrary code or privilege escalation (det...

CVE-2026-49789

CVE-2026-49789 is a Windows NTFS elevation-of-privilege vulnerability. A stack-based buffer overflow in NTFS could allow an authorized local attacker to escalate privileges. Affected component: Windows NTFS subsystem. Root cause: stack-based overflow in an NTFS operation, leading to potential cod...

CVE-2026-49806

The vulnerability CVE-2026-49806 affects the Windows USB Print Driver and is caused by a race condition from concurrent access to a shared resource due to improper synchronization. This leads to local privilege escalation by an authenticated, local attacker. The CVE’s base metrics indicate a LOCA...

CVE-2026-50299

The CVE-2026-50299 entry describes an integer overflow/wraparound in Windows Storage Spaces Direct. Affected component: Storage Spaces Direct (Windows). Root cause: integer overflow allowing an unauthorized attacker to execute code. Impact: code execution with a physical attack vector; CVSS vecto...

CVE-2026-50315

CVE-2026-50315 is a Windows Image Acquisition vulnerability described as a null pointer dereference that allows an authorized, local attacker to achieve privilege escalation. The entry notes a CVSSv3.1 base score of 7.8 (High), with local attack vector, low attack complexity, required privileges,...

CVE-2026-50337

CVE-2026-50337 is a Windows Notification vulnerability described as an issue with an incorrect type conversion or cast that allows an authorized attacker to achieve local privilege escalation. The CVE is listed with a CVSS v3.1 base score of 7.8 (HIGH), indicating a local attack vector with low c...

CVE-2026-50403

CVE-2026-50403 affects Windows Runtime and is driven by a race condition due to improper synchronization in the Windows Runtime, enabling an authorized attacker to elevate privileges locally. The Windows Runtime component/file/process implicated is elevated to allow local privilege escalation. Mi...

CVE-2026-50417

CVE-2026-50417 is a Windows NTFS heap-based buffer overflow that could allow an authenticated, local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components and is described as a local, privilege-leveraging scenario with HIGH impact (CVE-3.1, base score 7.8). Connect...

CVE-2026-50420

CVE-2026-50420 affects Windows HTTP.sys. It is an out-of-bounds read in HTTP.sys that can allow a local, unauthenticated attacker to disclose information. The CVE is listed with a CVSS v3.1 base score of 6.2 (Medium) and requires local access with no user interaction. Public references show multi...

CVE-2026-50424

CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...

CVE-2026-50442

Public technical details about CVE-2026-50442 are not provided in the supplied documents. Monitor for updates from MSRC/NCSC and NVD; apply the available Windows File Explorer update when released.

CVE-2026-54112

CVE-2026-54112 affects Windows Win32K. The issue is a race condition caused by concurrent execution on a shared resource due to improper synchronization, enabling a locally authenticated user to elevate privileges. The base score is 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges an...

CVE-2026-57096

CVE-2026-57096 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that allows an authorized attacker to elevate privileges locally. The CVSSv3.1 base score is 7.8 (HIGH). Exploitation details are not provided beyond local privilege escalati...

CVE-2026-58547

CVE-2026-58547 is a Windows UPnP Device Host vulnerability. The issue is a heap-based buffer overflow in upnp.dll that allows an authenticated local attacker to elevate privileges. The NVD entry and multiple advisories describe the root cause as a heap overflow in UPnP device host, with CVSS deta...

CVE-2026-58632

CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...

CVE-2026-58635

CVE-2026-58635 is a Windows Narrator Braille elevation-of-privilege vulnerability caused by improper neutralization of special elements used in a command. Exploitation is local, requires low privileges, and does not require user interaction; successful exploitation yields high impact to confident...

CVE-2025-55679

CVE-2025-55679 is a Windows Kernel information-disclosure vulnerability caused by improper input validation, enabling a local attacker to disclose information. The CVE is documented in multiple sources (NVD/NCSC lists) with a local attack vector and a medium base impact. Connected MS advisories a...

CVE-2025-55690

CVE-2025-55690 is described in connected advisories as a Windows PrintWorkflowUserSvc use-after-free vulnerability that enables local privilege escalation by an authorized user. The MSRC entry confirms the affected component and vulnerability class (use-after-free leading to elevation of privileg...

CVE-2025-60705

Technical details about CVE-2025-60705 (affected product, root cause, impact, or Fix) are not provided in the connected documents. Monitor for updates from Microsoft/MSRC for validation, impact, and remediation.

CVE-2026-20829

CVE-2026-20829 is a TPM Trustlet Information Disclosure vulnerability in Windows TPM: an out-of-bounds read can allow an authorized, local attacker to disclose information. The linked Nessus/NVD/CIRCL entries confirm Windows TPM involvement and a local attack vector with low privileges. Microsoft...

CVE-2026-20874

CVE-2026-20874 is a Windows Management Services race condition that can lead to local privilege elevation. The initial description states the issue is a race condition in Windows Management Services exploited by an authorized attacker to escalate privileges. Connected documents corroborate this u...

CVE-2026-21234

CVE-2026-21234 concerns Windows Connected Devices Platform Service where a race condition due to improper synchronization enables local privilege escalation for an authorized attacker. The vulnerability affects the platform service's concurrent execution via a shared resource; impact includes con...

CVE-2026-21245

CVE-2026-21245 describes a heap-based buffer overflow in the Windows Kernel that enables an authorized local attacker to escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, and no user interaction. Impact is HIG...