New vulnerabilities – clearly explained

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows: Use-after-free leading to local privilege escalation

A use-after-free flaw in the Windows Internal System User Profile component allows an authorized local user to elevate privileges. An attacker needs a valid user account on the affected system, so the flaw is not directly reachable from the network. The CVSS base score is 7.8 (High), and Microsoft has published a fix.

Microsoft · Windows 10 Version 1607

Microsoft Windows WalletService: Elevation of privilege via link following

The Windows WalletService handles link resolution improperly before file access (CWE-59, link following). A local user with low privileges can abuse this to elevate privileges to SYSTEM level, which allows full impact on confidentiality, integrity and availability. The attack needs local logon and no user interaction, so it is an escalation step rather than an initial access vector. Microsoft has released fixes for affected Windows 10, Windows 11 and Windows Server builds.

Microsoft · Windows WalletService

Microsoft .NET: Remote code execution via out-of-bounds write in WPF

An out-of-bounds write in the WPF runtime of Microsoft .NET 8 to 11 and in affected Visual Studio versions allows remote code execution. Crafted WPF pixel-shader bytecode can desynchronize the parsing passes in CPSTrans::Initialize, which leads to heap out-of-bounds writes or reads. An attacker needs no privileges, but a user must open or load the crafted content, for example from a phishing file or link, and the flaw affects only Windows desktop applications that render untrusted shaders.

Microsoft · .NET Runtime (WPF)

Microsoft .NET: Link following allows local privilege escalation

A link following weakness (CWE-59) in the Microsoft .NET runtime allows an authorized local attacker to elevate privileges. The affected code runs in any .NET application on the host. An attacker needs an existing local account or process on the system and no user interaction is required. Vendor-side evidence points to Linux and macOS; Windows impact is unconfirmed.

Microsoft · .NET

Microsoft ASP.NET Core: Cross-site scripting in Blazor WebAssembly debugging

Microsoft's ASP.NET Core components for Blazor WebAssembly contain a cross-site scripting flaw (CWE-79) in the debug endpoint of the development server. An unauthenticated remote attacker can inject script that runs in the browser of a user who opens a crafted link or page, for example to act within the victim's session. Exploitation requires the debug middleware (UseWebAssemblyDebugging) to be active and user interaction. Microsoft's title says Remote Code Execution, but the documented mechanism is script injection.

Microsoft · ASP.NET Core

Microsoft .NET: Link following enables local privilege escalation

Microsoft's .NET runtime does not properly resolve links before accessing files (CWE-59, link following), including named-mutex and shared-memory paths on Unix-like systems. An authorized local user can abuse this to elevate privileges on the affected host. Exploitation requires a local account and is not reachable from the internet. Microsoft has released fixed versions, and no public exploit or active exploitation has been reported.

Microsoft · .NET

Microsoft .NET: Out-of-bounds write leading to remote code execution

Microsoft .NET runtimes 8.0, 9.0, 10.0 and 11.0 previews, several .NET Framework versions, and Visual Studio 2022 17.14 and 2026 18.10 contain an out-of-bounds write in the WPF pixel-shader handling. An unauthenticated attacker can execute code over the network if a user opens or loads crafted content, such as a malicious file or link. Microsoft rates the vulnerability CVSS 8.8 (High), and no exploitation or public proof of concept is known.

Microsoft · .NET

Windows Hyper-V: Use after free allows local privilege escalation

A use-after-free flaw in Microsoft Windows Hyper-V allows an authorized local attacker to elevate privileges. The attacker needs an existing local foothold with low privileges, so the flaw is a step in an attack chain rather than a direct entry point. The CVSS score is 7.8 (High), with high impact on confidentiality, integrity and availability.

Microsoft · Windows Hyper-V

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows: Local privilege escalation via code injection in Assigned Access

A code injection flaw (CWE-94) in the Windows Assigned Access component allows an authorized local user to elevate privileges. The attacker needs a low-privileged local account and cannot exploit the flaw remotely. CVSS 3.1 rates it 7.8 (High) with high impact on confidentiality, integrity and availability.

Microsoft · Windows

Microsoft Windows LSASS: Remote code execution via out-of-bounds write

A critical out-of-bounds write in the Windows Local Security Authority Subsystem Service (LSASS) allows an unauthenticated remote attacker to execute code over a network. LSASS handles authentication and security policy, so a compromise on a domain controller or server could give an attacker control of the Windows domain. Microsoft and NVD rate the flaw 9.8 (CVSS 3.1). The network service or protocol that triggers the flaw is not stated in the sources reviewed.

Microsoft · Windows LSASS

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Windows 10 1607: Heap-based buffer overflow in NTFS enables privilege escalation

A heap-based buffer overflow in the Windows NTFS file system driver allows a local attacker with low privileges to escalate to SYSTEM level. The attacker needs an existing foothold on the device, such as a phished user session or malware, so the risk is mainly post-compromise. The CVSS score is 7.8 (High), and Microsoft rates the technical impact as total.

Microsoft · Windows 10 Version 1607

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 11 24h2

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows Subsystem For Linux

Research and translation in progress – available shortly.

Microsoft Windows Raw Image Extension: Heap-based buffer overflow allows code execution

Microsoft Windows Raw Image Extension contains a heap-based buffer overflow (CWE-122) that allows remote code execution. The extension is a Windows codec that decodes RAW camera files in programs such as File Explorer and Photos. An unauthenticated attacker can exploit it by getting a victim to open or preview a crafted RAW file, which requires user interaction. Microsoft rates the flaw as Critical with CVSS 8.8.

Microsoft · Windows Raw Image Extension

Microsoft Windows Media Foundation: Deserialization leads to local privilege escalation

Deserialization of untrusted data in Microsoft Windows Media Foundation allows a locally authorized attacker to elevate privileges. Exploitation requires local access and low privileges, with no user interaction. Successful exploitation would give the attacker a high impact on confidentiality, integrity and availability of the affected system.

Microsoft · Windows Media Foundation

Microsoft Windows 11 24h2

Research and translation in progress – available shortly.

Windows 10 Version 1607: Out-of-bounds read in Graphics Kernel

An out-of-bounds read in the Windows Graphics Kernel of Windows 10 Version 1607 allows an authorized local attacker to elevate privileges. The attacker needs local access and low privileges, such as an existing user session, and no user interaction is required. The CVSS 3.1 base score is 7.8 (High), and no active exploitation is known. Microsoft's release-health page states that this release has reached end of updates, so the availability of further security updates must be confirmed.

Microsoft · Windows 10 Version 1607

Microsoft Windows DNS Server: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in the Windows DNS Server role allows an unauthenticated attacker to execute code remotely over the network. No user interaction is required, and the CVSS base score is 9.8 (critical). Servers with the DNS Server role reachable from untrusted networks, including domain controllers that run DNS, are at the highest risk.

Microsoft · Windows DNS Server