CVE-2026-21525

CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...

CVE-2026-61918

CVE-2026-61918 is a Windows Remote Desktop Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The issue is confirmed in public CVE listings and is associated with the Remote Desktop Client componen...

CVE-2025-21215

Technical details about CVE-2025-21215 are not provided in the connected documents. Public information here is limited to the vulnerability title and references; monitor for updates from Microsoft/NVD.

CVE-2025-21317

CVE-2025-21317 is a Windows Kernel Memory Information Disclosure vulnerability with CVSS 3.1/5.5 (LOCAL, LOW complexity, LOW privileges) and has the potential to expose confidential data from kernel memory. Connected documents confirm a Windows Kernel Memory Information Disclosure issue and indic...

CVE-2025-21349

CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...

CVE-2025-32725

CVE-2025-32725 is a Windows DHCP Server vulnerability described as a protection‑mechanism failure that allows an attacker to cause a network DoS. Connected sources confirm this CVE is associated with the DHCP Server and note that remediation involves applying June 2025 Windows security updates (e...

CVE-2026-42977

CVE-2026-42977 describes a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with Local attack vector, high complexity, and req...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2026-62713

CVE-2026-62713 : Heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Available documents identify the affected component as the Windows Cloud Files Mini Filter Driver, with a local attack vector and low privileges r...

CVE-2025-21200

CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...

CVE-2025-21217

CVE-2025-21217 is a Windows NTLM spoofing vulnerability with a CVSS v3.1 base score of 6.5 (Network, low attack complexity, no privileges required, user interaction required; Confidentiality impact: High). Exploitation details, affected products/versions, and a fixed patch are not provided in the...

CVE-2025-21224

CVE-2025-21224 refers to a Windows Line Printer Daemon (LPD) Service remote code execution vulnerability. The primary connected sources indicate an attacker could exploit a network remote vector to achieve code execution with no user interaction, with a CVSSv3.1 base score of 8.1 (AV:N/AC:H/PR:N/...

CVE-2025-21228

CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...

CVE-2025-21280

CVE-2025-21280 is a Windows Virtual Trusted Platform Module Denial of Service vulnerability. Connected documents identify the affected component as the Windows Virtual TPM and note an impact on availability. The NCSC advisory lists a CVSS v3.1 base score of 5.5 (LOCAL attack, LOW privileges requi...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

CVE-2025-26676

CVE-2025-26676 is a Windows RRAS vulnerability described as a buffer over-read that allows an unauthenticated, network-connected attacker to disclose application/network data. The affected component is Windows Routing and Remote Access Service; root cause is a memory over-read in RRAS processing,...

CVE-2025-27473

CVE-2025-27473 affects Windows HTTP.sys. Description in the connected sources confirms an uncontrolled resource consumption condition that enables a network-based Denial of Service, exploitable by an unauthorized attacker. The vulnerability impact is denial of service over the network; no exploit...

CVE-2025-29831

Technical details about CVE-2025-29831 (affected product, root cause, patch) are not provided in the supplied documents. Monitor for updates and refer to the official vulnerability entry for authoritative information.

CVE-2026-70347

CVE-2026-70347 describes a heap-based buffer overflow in Windows Installer that can enable an authenticated, local attacker to elevate privileges. Affected component is Windows Installer; the vulnerability is a local, privilege-escalation flaw with high impact (C:H/I:H/A:H) and CVSSv3.1 score 7.8...

CVE-2024-43628

According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...

CVE-2024-43638

CVE-2024-43638 is a Windows USB Video Class System Driver Elevation of Privilege vulnerability. The connected sources corroborate a Windows USB Video Driver component as the affected area and indicate that mitigations are released via Microsoft security updates (e.g., November 2024 updates/KBs). ...

CVE-2024-49079

Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.

CVE-2024-49088

CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

CVE-2025-21233

CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...

CVE-2025-21254

CVE-2025-21254 is associated with Internet Connection Sharing (ICS) in Windows and is described as a Denial-of-Service vulnerability. The primary documented impact is availability disruption (A) with low attack complexity and adjacent-attack vector, no authentication or user interaction required,...

CVE-2025-21281

CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...

CVE-2025-21330

CVE-2025-21330 is a Windows Remote Desktop Services Denial-of-Service vulnerability. The connected sources confirm the vulnerability name and its impact class (DoS) with a CVSS v3.1 base score of 7.5 (Network attack vector, no privileges required, no user interaction). The provided documents do n...

CVE-2025-24987

CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...

CVE-2025-26674

CVE-2025-26674 is a Windows Media heap-based buffer overflow vulnerability that could allow an authorized, locally present attacker to execute code on the system. The CVE has a base score of 7.8 ( HIGH ) and is addressed by Microsoft security updates (e.g., KBs from the April 2025 cycle). See Mic...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2026-54984

Windows Imaging Component contains a heap-based buffer overflow that allows an unauthenticated user with local access to execute arbitrary code. This CVE-2026-54984 is described as a local, high-severity issue (CVSS 7.8). The documents provide no exploit details or remediation guidance; refer to ...

CVE-2026-58626

CVE-2026-58626 is a Windows Remote Desktop Services use-after-free vulnerability that can allow an authenticated attacker to execute arbitrary code over the network. The CVE is rated CVSS v3.1 base score 8.8 (High) with Network attack, Low attack complexity, Privileges Required: Low, User Interac...

CVE-2024-49093

CVE-2024-49093: Windows Resilient File System (ReFS) Elevation of Privilege vulnerability. Affected: ReFS on Windows. Root cause and exploit details are not fully disclosed in the provided documents; the CVSSv3.1 vector from the initial entry indicates LOCAL attack vector, LOW attack complexity, ...

CVE-2025-21244

Technical details for CVE-2025-21244 are not provided in the connected documents. They reference a Windows Telephony Service RCE but do not disclose affected versions, root cause, exploit methods, or fixes. Monitor official advisories for updates.

CVE-2025-21247

CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...

CVE-2025-21316

Technical details for CVE-2025-21316 are not publicly available in the provided documents. Monitor for updates from Microsoft and threat intelligence sources.

CVE-2025-24051

Technical details about CVE-2025-24051 are not publicly provided in the connected documents. The initial entry notes a heap overflow in RRAS enabling remote code execution, but no affected versions, exploit specifics, or mitigations are present here. Monitor for updates.

CVE-2025-24062

CVE-2025-24062 describes an input-validation flaw in Windows DWM Core Library that enables local elevation of privileges by an authenticated attacker. The incident is documented by Microsoft and CVE listings, which indicate a high-severity, local-privilege-elevation issue. Remediation is provided...

CVE-2025-27729

CVE-2025-27729 is a Windows Shell remote code execution issue described as a use-after-free vulnerability that enables local code execution. The linked sources confirm this affects Windows Shell and related components, with Microsoft providing security updates to remediate the flaw (for example K...

CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2025-21231

CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...

CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2025-27476

CVE-2025-27476 is a Windows Digital Media use-after-free vulnerability that enables local privilege escalation on an affected system. Governance: the initial description confirms local elevation of privileges; connected Microsoft advisories and NVD entries indicate Windows Digital Media is the af...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2026-62721

Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2025-21225

Technical details about CVE-2025-21225 (WindowsRD Gateway Denial-of-Service) are not provided in the connected documents. Public details appear only as vulnerability entries; monitor official advisories and patch guidance for remediation and impact updates.