New vulnerabilities – clearly explained

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 11 24h2

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows WebDAV: Remote code execution in Web Distributed Authoring and Versioning

A flaw in the Windows WebDAV component (improper resolution of path equivalence, CWE-41) allows an authenticated attacker with network access to execute code remotely. The attacker needs a valid low-privilege account, but no user interaction is required. Microsoft rates the flaw with CVSS 8.8 (High); the risk is highest for servers and file shares that run WebDAV and are reachable from the internet or branch offices.

Microsoft · Windows WebDAV

Microsoft Windows WebDAV: Elevation of privilege via improper access control

A flaw in the WebDAV component of Microsoft Windows allows an authorized local user to elevate privileges. An attacker who already has a low-privilege local account can gain higher rights, with high impact on confidentiality, integrity and availability. No user interaction is required, but local access is needed.

Microsoft · Windows

Microsoft Windows 10 1607: Use-after-free in kernel allows privilege escalation

A use-after-free flaw (CWE-416) in the Windows kernel of Windows 10 Version 1607 allows a local attacker to elevate privileges. The attacker needs a low-privilege account on the system. Windows Server 2016 uses the same affected build range according to the official CVE record. The CVSS base score is 7.8 (HIGH).

Microsoft · Windows 10 1607

Microsoft Windows: Local privilege escalation in Portable Device Enumerator Service

A flaw in the Windows Portable Device Enumerator Service allows an attacker who already has local access and low privileges to elevate their privileges. No user interaction is required. The risk is mainly as a follow-up step after an attacker has already gained a foothold on a system, for example through malware running as a standard user.

Microsoft · Windows

Microsoft Windows Server 2012

Research and translation in progress – available shortly.

Microsoft Windows Server 2012

Research and translation in progress – available shortly.

Windows DWM Core Library: Heap-based buffer overflow enables local privilege escalation

The Windows DWM Core Library, the desktop compositing component of Windows, contains a heap-based buffer overflow (CWE-122). A local user with low privileges can exploit it to elevate privileges on the affected system. No user interaction is required, and successful exploitation can fully compromise confidentiality, integrity and availability of the host.

Microsoft · Windows DWM Core Library

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows: Elevation of privilege in WebDAV

The WebDAV component of Microsoft Windows contains an untrusted pointer dereference (CWE-822). An authenticated local user can exploit it to elevate privileges. Successful exploitation can lead to high impact on confidentiality, integrity and availability. Microsoft fixed the issue in the October 2026 security updates.

Microsoft · Windows

Microsoft Windows Server 2012

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows Server 2012

Research and translation in progress – available shortly.

Microsoft Windows Server 2012

Research and translation in progress – available shortly.

Microsoft Windows BITS: Remote code execution via use-after-free

A use-after-free flaw in the Windows Background Intelligent Transfer Service (BITS) allows an attacker to execute code over the network. According to the CVE description, the attacker does not need to be authenticated. The attack vector and privilege requirements in the supplied CVSS vector differ from the vendor scoring, so the score must be verified before it is used for prioritisation. Microsoft has published fixed builds for several Windows 10, Windows 11 and Windows Server versions. Exploitation is not known: the CVE is not listed in CISA KEV and no public proof of concept was found in our checks.

Microsoft · Windows BITS

Windows DHCP Server: Remote code execution via use-after-free

A use-after-free flaw (CWE-416) in the DHCP Server service of Windows Server allows an unauthenticated attacker to execute code remotely. The attacker must send a specially crafted network packet to an affected DHCP server. Attack complexity is high and no user interaction is required. Microsoft rates the maximum severity as Critical, while the NVD CVSS base score is 8.1 (High).

Microsoft · Windows DHCP Server

Windows DHCP Server: Use-after-free allows remote code execution

A use-after-free flaw in the Windows DHCP Server role allows an unauthenticated attacker to execute code over the network. Microsoft rates the attack complexity as high and the exploitation likelihood as less likely, and no public exploit code or active exploitation is known. A DHCP server normally sits on the internal network, so the practical risk is highest on flat networks or where DHCP is reachable across segments.

Microsoft · Windows DHCP Server

Microsoft Windows BITS: Elevation of privilege via integer overflow

An integer overflow or wraparound in the Windows Background Intelligent Transfer Service (BITS) allows an authorized local attacker to elevate privileges. According to Microsoft, a successful attack can grant SYSTEM privileges. The attacker needs a local account with low privileges, and no user interaction is required. Microsoft has released fixed builds for the affected Windows 10, Windows 11 and Windows Server versions. CISA's assessment lists exploitation as none, and no public exploit has been found.

Microsoft · Windows

Windows DHCP Server: Remote code execution due to use-after-free

A use-after-free flaw (CWE-416) in the Windows DHCP Server role allows an unauthenticated attacker to execute code remotely. The attacker needs network access to the DHCP server, and no user interaction is required. Microsoft rates the attack complexity as high, and the CVSS base score is 8.1.

Microsoft · Windows Server

Windows DNS Server: Remote code execution via untrusted pointer dereference

A flaw in the Windows Domain Name Service component of Windows DNS Server allows an unauthenticated attacker to execute code remotely over the network. The CVSS vector requires no privileges but also user interaction (UI:R). Successful exploitation could give the attacker high confidentiality, integrity and availability impact on the affected server. Exposure is highest for DNS servers reachable from the internet, a DMZ or untrusted network segments.

Microsoft · Windows DNS Server

Windows Server for NFS: Remote code execution via out-of-bounds read

A out-of-bounds read in the NFS implementation of Windows Server allows an unauthenticated network attacker to execute code. The CVSS vector requires no privileges, but it also includes user interaction (UI:R), and third-party sources disagree on how the trigger works. The risk is only relevant where the Services for NFS role is installed, and it is highest if an NFS endpoint is reachable from the internet.

Microsoft · Windows Server

Microsoft Windows DNS Server: Remote code execution vulnerability

An untrusted pointer dereference in the Windows DNS Server role allows an unauthenticated attacker to execute code remotely over the network. Microsoft rates the impact on confidentiality, integrity and availability as high, and CISA's SSVC data rates it as total technical impact. User interaction is flagged (UI:R), so the exact trigger should be confirmed with Microsoft. Exposure is mainly relevant where a Windows DNS Server is reachable from untrusted networks or the internet.

Microsoft · Windows Domain Name Service

Microsoft Windows 10 1809

Research and translation in progress – available shortly.