Deserialization of untrusted data in on-premises Microsoft Exchange Server allows an attacker with a local, low-privileged account on the server to elevate privileges. The CVSS base score is 7.8 (High), with high impact on confidentiality, integrity and availability. This is a post-compromise escalation and is not remotely exploitable on its own, but a SYSTEM-level foothold on a mail server exposes mailboxes, credentials and the Active Directory trust.
Microsoft · Exchange Server
A use-after-free flaw (CWE-416) in the Windows Management Services component allows a local attacker with low privileges to elevate their rights on the affected system. The attacker needs an existing foothold on the machine, for example through phishing, stolen credentials or a local user account. Exploitation is not known and Microsoft rates it as less likely; the issue is mainly relevant on multi-user systems and terminal servers.
Microsoft · Windows Management Services
A use-after-free flaw (CWE-416) in the Windows kernel allows a local attacker with low privileges to elevate their rights. Per the NVD CVSS vector, no user interaction is required and the impact on confidentiality, integrity and availability is high. The flaw is not directly reachable from the internet and is mainly a risk when an attacker already has a foothold on the system, for example via a phishing attack, a stolen low-privilege account or a malicious application.
Microsoft · Windows 10 1607
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A double free vulnerability in Windows Shell, the desktop and Explorer component, allows an unauthorized attacker to execute code over the network. Per the listed vector, exploitation requires user interaction and low complexity, and the impact on confidentiality, integrity and availability is rated high. The official CNA record lists many Windows 10, Windows 11 and Windows Server versions, while the CPE data and the research notes focus on Windows 10 1607 and Windows Server 2016.
Microsoft · Windows 10
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Windows Print Spooler Components contains a use-after-free flaw (CWE-416). An authorized local user can exploit it to gain higher privileges, up to SYSTEM. Several Windows 10, Windows 11 and Windows Server versions are affected, including Windows 10 1607 and Windows Server 2016. The attack requires local access and a low-privileged account; there is no remote attack path. The CVSS 3.1 base score is 7.8 (High).
Microsoft · Windows Print Spooler Components
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows Distributed File System (DFS) allows an attacker to execute code over the network. The attacker needs a valid low-privilege account that can reach the affected system, and no user interaction is required. The CVSS 3.1 base score is 8.8 (High), with high impact on confidentiality, integrity and availability. The main risk is lateral movement from a compromised user account rather than direct internet attacks.
Microsoft · Windows Distributed File System (DFS)
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows Volume Manager Extension Driver, a kernel-level driver, affects several client and server editions of Windows from Windows 10 1607 to Windows 11 26H2 and Windows Server 2012 to 2016. Microsoft describes the flaw as allowing code execution, and the NVD score of 9.8 assumes network access without privileges or user interaction. Microsoft rates the severity as Important, and the network attack path has not been verified, so the remote label should be treated as unconfirmed.
Microsoft · Windows
A heap-based buffer overflow in the Windows Universal Plug and Play (UPnP) Device Host allows an authorized local attacker to elevate privileges. Successful exploitation gives full control over the affected system (high impact on confidentiality, integrity and availability). The attacker needs a low-privileged account or foothold on the system, and no user interaction is required. The vulnerability is not directly reachable from the internet according to the CVSS vector.
Microsoft · Windows UPnP Device Host
A use-after-free flaw (CWE-416) in the Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthenticated remote attacker to execute code over the network. The attack complexity is rated high and no user interaction is required. Systems are only reachable if they run an SSTP listener, typically a Windows Server RRAS VPN endpoint.
Microsoft · Windows
The Azure Key Vault Client SDK packages for Administration, Certificates, Keys and Secrets contain an improper restriction of communication channel to intended endpoints (CWE-923). According to Microsoft, an authorized attacker with low privileges on the network can obtain and reuse another user's Key Vault access token, which allows reading, changing or deleting secrets and performing cryptographic operations in that user's vault. The attack is rated high complexity, and the CVSS 3.1 base score is 8.2 (High).
Microsoft · Azure Key Vault Client SDK
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows PCI Bus Driver allows an authorized local user to elevate privileges. Affected are supported Windows 10, Windows 11 and Windows Server 2019, 2022 and 2025 systems. An attacker needs a local account with low privileges and no user interaction, and a successful attack can lead to full control of the affected machine. The vulnerability is not reachable directly from the internet.
Microsoft · Windows PCI Bus Driver
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
