CVE-2026-57097

CVE-2026-57097 describes an Untrusted search path in Microsoft XML that allows a physical attacker to bypass a security feature. Affects Microsoft XML; impact is described as high for confidentiality, integrity, and availability with a physical attack requiring no user interaction. No exploit det...

CVE-2026-26163

CVE-2026-26163 is a Windows Kernel elevation-of-privilege vulnerability described as a double free allowing an authorized local attacker to escalate privileges. Connected sources confirm the affected surface is Windows Kernel and the issue enables local privilege escalation with high impact. The ...

CVE-2026-27911

Technical details not publicly available in the provided documents. Monitor for updates on affected products, vulnerable component, impact, and remediation.

CVE-2026-32158

CVE-2026-32158 is a race-condition vulnerability in Windows Push Notifications (Windows Push Notification Core) where concurrent access to a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The issue arises from a race between processes/thre...

CVE-2026-45654

Technical details about CVE-2026-45654 are not publicly available in the provided documents. Monitor for updates from the NVD/CVE records for affected products, root cause specifics, impact, and remediation.

CVE-2026-49787

The CVE-2026-49787 entry describes a Denial of Service vulnerability in Windows HTTP.sys caused by allocation of resources without limits or throttling, leading to an unauthorized network-based disruption. Affected component is HTTP.sys on Windows; impact is availability (denial of service) with ...

CVE-2026-50384

CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...

CVE-2026-50392

CVE-2026-50392 is a use-after-free vulnerability in Windows Secure Kernel Mode that enables an authorized, local attacker to elevate privileges. Connected sources identify the flaw in the Windows Secure Kernel Mode and confirm exploitation would occur locally with elevated impact to confidentiali...

CVE-2026-50462

CVE-2026-50462 affects the Windows Ancillary Function Driver for WinSock. The disclosed issue is external control of a file name or path, enabling an authorized attacker to elevate privileges locally (local privilege escalation). CVSS v3.1 score is 7.8 (High) with Privileges: Low, User Interactio...

CVE-2026-50687

CVE-2026-50687 is a Windows Win32k local privilege-escalation vulnerability caused by a use-after-free in the Windows Kernel. It affects the Win32k subsystem and enables an authenticated attacker to elevate privileges locally (base CVSS v3.1 score 8.8, vector: LOCAL, LOW complexity, LOW privilege...

CVE-2026-78444

CVE-2026-78444 is an untrusted pointer dereference vulnerability in Windows Failover Cluster that allows an unauthorized, network-based attacker to achieve remote code execution . The attack requires high complexity but no prior privileges or user interaction, with high impact to confidentiality,...

CVE-2025-53807

CVE-2025-53807 describes a race condition in the Microsoft Graphics Component that allows local privilege escalation. The NCSC document confirms CVE-2025-53807 under Windows-related vulnerabilities. The CVSS3.1 vector from the initial document indicates a Local attack vector, High impact on confi...

CVE-2025-55336

Technical details (affected component/version, root cause, exploit info, and fix) for CVE-2025-55336 are not provided in the connected documents. Monitor official advisories (e.g., MSKB/NVD) for concrete remediation guidance.

CVE-2025-55687

CVE-2025-55687 is a local privilege-escalation vulnerability in Windows Resilient File System (ReFS) caused by a race condition when concurrent access to a shared resource occurs with improper synchronization. The impact is local elevation of privileges. Public docs (NCSC advisory and EUVD summar...

CVE-2025-59508

CVE-2025-59508 is reported in Windows Speech as a race-condition in concurrent execution on a shared resource, enabling local privilege escalation for an authorized attacker. The connected NCSC advisory lists Windows Speech CVE-2025-59508 with an impact of obtaining increased rights. Public detai...

CVE-2025-62468

CVE-2025-62468 is a Windows Defender Firewall Service information-disclosure vulnerability caused by an out-of-bounds read that can disclose information locally to an authorized attacker. The issue is described consistently across sources as a local-privilege/ information-disclosure exposure affe...

CVE-2025-62474

CVE-2025-62474 is a Windows Remote Access Connection Manager Elevation of Privilege vulnerability. It involves improper access control in the Remote Access Connection Manager, enabling a locally authenticated attacker (low privileges, no user interaction) to obtain elevated rights. CVSS v3.1 base...

CVE-2026-20827

CVE-2026-20827 affects the Tablet Windows User Interface (TWINUI) Subsystem, enabling local disclosure of sensitive information to an attacker with low privileges and no user interaction. The vulnerability is mapped to a local-attack vector with high confidentiality impact (C:H, I:N, A:N) and a C...

CVE-2026-21245

CVE-2026-21245 describes a heap-based buffer overflow in the Windows Kernel that enables an authorized local attacker to escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, and no user interaction. Impact is HIG...

CVE-2026-24289

Technical details about CVE-2026-24289 are not provided in the documents; no affected products, vulnerable components, impact, or remediation details are listed here. Monitor for updates.

CVE-2026-32152

CVE-2026-32152 is a use-after-free in Desktop Window Manager that allows an authenticated, local attacker to elevate privileges. Microsoft has issued multiple security updates addressing this vulnerability across Windows SKUs (e.g., KB5082142 for Server 2022, KB5082052 for Windows 11 23H2, KB5083...

CVE-2026-32159

CVE-2026-32159 affects Windows Push Notifications. The issue is a local elevation-of-privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH). Attack requires local access, high attack complexity, and low privileges, with no user interaction, and can impact confidentiality, integrity, an...

CVE-2026-32219

CVE-2026-32219 is a Microsoft-related local privilege escalation in the brokering file system. The entry cites a local attack vector with high impact on confidentiality, integrity, and availability, requiring low privileges and no user interaction; exploitation is marked as UNPROVEN and the remed...

CVE-2026-40422

CVE-2026-40422 concerns Windows File Explorer where an uninitialized resource leads to local information disclosure. The affected component is File Explorer; the underlying issue is an uninitialized resource, enabling an authorized user with local access (low privilege, no user interaction) to di...

CVE-2026-49797

CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.

CVE-2026-58609

The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...

CVE-2026-58632

CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...

CVE-2026-58635

CVE-2026-58635 is a Windows Narrator Braille elevation-of-privilege vulnerability caused by improper neutralization of special elements used in a command. Exploitation is local, requires low privileges, and does not require user interaction; successful exploitation yields high impact to confident...

CVE-2026-62723

CVE-2026-62723 is a use-after-free vulnerability in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The NVD entry and CVE records confirm a local exploit path with low privileges required and no user interaction, with a CVSSv3.1 base score of 7.0 (High)...

CVE-2026-69768

A heap-based buffer overflow in Windows RNDIS (Remote Network Driver Interface Specification) allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) , reflecting high impac...

CVE-2026-83986

CVE-2026-83986 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege attacker to locally elevate privileges . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low atta...

CVE-2025-53719

CVE-2025-53719 affects Windows Routing and Remote Access Service (RRAS); an uninitialized resource in RRAS can allow an authorized network attacker to disclose information. The issue is tied to RRAS in Windows, with CVSS v3.1 base score 5.7 (Network, Low attack complexity, Privileges required: Lo...

CVE-2025-53804

CVE-2025-53804 affects the Windows Kernel and involves exposure of sensitive information to an unauthorized actor, allowing local disclosure. The threat is categorized with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with low complexity, where privileges are low and no user i...

CVE-2025-59187

CVE-2025-59187 corresponds to a Windows Kernel local privilege escalation described in EUVD-2025-34304 as due to improper input validation. The vulnerability affects the Windows Kernel with the potential for an authorized attacker to elevate privileges locally. The connected KB updates discuss Wi...

CVE-2026-20826

CVE-2026-20826 describes a race-condition in the Tablet Windows User Interface (TWINUI) Subsystem. The initial entry asserts an information disclosure/elevation of privileges vector via concurrent access to a shared resource, enabling an authorized attacker to elevate privileges locally. Microsof...

CVE-2026-21246

CVE-2026-21246 is a heap-based buffer overflow in the Microsoft Graphics Component that enables local privilege escalation for an authorized attacker. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges, NONE user interaction) yields a base score of 7.8 (HIGH impact on confidentiality, int...

CVE-2026-24290

CVE-2026-24290 concerns the Windows Projected File System and is an Elevation of Privilege vulnerability. The CVE shows a LOCAL attack vector with LOW privileges required and NONE user interaction, with impacts on confidentiality, integrity, and availability rated as High. The metric set indicate...

CVE-2026-25174

CVE-2026-25174 is a Windows Privilege Elevation vulnerability described as an out-of-bounds read in the Windows Extensible File Allocation feature. The connected NCSC advisory confirms Microsoft has fixed vulnerabilities across Windows components, listing CVE-2026-25174 under Windows Extensible F...

CVE-2026-25186

Technical details not publicly available in the provided documents. Monitor for updates.

CVE-2026-50420

CVE-2026-50420 affects Windows HTTP.sys. It is an out-of-bounds read in HTTP.sys that can allow a local, unauthenticated attacker to disclose information. The CVE is listed with a CVSS v3.1 base score of 6.2 (Medium) and requires local access with no user interaction. Public references show multi...

CVE-2026-50674

CVE-2026-50674 describes a use-after-free vulnerability in the Windows USB Print Driver that can be exploited by an authenticated local attacker to escalate privileges. The issue affects the Windows USB Print Driver component and is triggered by a use-after-free condition in processing USB print ...

CVE-2026-56649

CVE-2026-56649 is a race-condition in Windows Network File System that could let a remote attacker execute code over the network by abusing a shared resource. Public sources (NVD, EUVD, CIRCL) confirm the race condition as the root cause. Microsoft has released updates addressing this vulnerabili...

CVE-2026-58537

CVE-2026-58537 (Microsoft NAT Helper Components, ipnathlp.dll) is a use-after-free vulnerability that allows an authenticated local attacker to achieve elevation of privileges. The connected sources confirm the flaw and its local-privilege-impact, with Microsoft and CVE listings documenting ipnat...

CVE-2026-72986

CVE-2026-72986 is a heap-based buffer overflow in Graphic Fonts that allows an unauthorized attacker to achieve remote code execution over a network. The CNA (Microsoft) assigns a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable exp...

CVE-2026-72987

CVE-2026-72987 is a use after free vulnerability in Windows DNS that allows an unauthorized attacker to execute code over a network, resulting in full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.1 (HIGH) , with a network attack vector, high complexity,...

CVE-2026-73025

CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...

CVE-2025-49761

CVE-2025-49761 is a Windows Kernel local privilege escalation (Use-after-free) vulnerability. The connected data confirms an effect: “Obtaining elevated privileges” with CVSS v3.1 base metrics indicating LOCAL, low attack complexity and privileges required, high impact to confidentiality/integrit...

CVE-2025-55328

Vulnerability summary (CVE-2025-55328) : A race condition in Windows Hyper-V involving a shared resource can be exploited by an authorized local attacker to elevate privileges. The issue is categorized under Windows Hyper-V with a high impact (local, privilege escalation) and a high base score in...

CVE-2025-55686

CVE-2025-55686 is described as a use-after-free vulnerability in Windows PrintWorkflowUserSvc that allows an authorized, local attacker to elevate privileges. The Initial and connected sources confirm the vulnerable component (PrintWorkflowUserSvc) and the local privilege-escalation impact, but d...

CVE-2025-60713

CVE-2025-60713 is an elevation-of-privilege flaw in Windows RRAS caused by an untrusted pointer dereference. Public docs confirm local privilege escalation for an authenticated attacker. Affected component is RRAS in Windows; CVSS v3.1 base score 7.8 (High). Remediation is provided via Microsoft’...