A missing authentication check for a critical function in the Windows Health and Optimized Experiences Service allows an authorized local user to elevate privileges. Successful exploitation can give an attacker high impact on confidentiality, integrity and availability of the system. Microsoft classes the attack as local with low privileges required, so an attacker first needs a foothold such as a logged-in account or malware. A public proof-of-concept has been reported, so unpatched systems should be prioritised.
Microsoft · Windows 11
Microsoft Office for Android contains a stack-based buffer overflow in the Microsoft Office Graphics component. An authorized attacker with a low-privileged foothold on the network can elevate privileges, with user interaction required. The vendor rates the impact on confidentiality, integrity and availability as high. The CPE entry 365 Copilot in the source data is not supported by the CVE record or the MSRC advisory and should be corrected.
Microsoft · Office for Android
Research and translation in progress – available shortly.
A use-after-free vulnerability (CWE-416) in the Queue Manager component of Windows Message Queuing (MSMQ) allows an authorized local attacker to execute code. The CVSS 3.1 base score is 7.8 (High) with a local attack vector, low privileges required and no user interaction. An attacker needs an existing low-privileged account or foothold on the system, so the main risk is privilege escalation and full compromise after an initial intrusion. The CVE title mentions Remote Code Execution, but the description and CVSS vector describe local exploitation only.
Microsoft · Windows Message Queuing
A use-after-free flaw in the Windows Storage VSP Driver, a kernel-level Windows storage component, allows an attacker who is already authorised on the system to elevate their privileges locally. The attack is local only and is not reachable from the internet. The main risk is privilege escalation after an attacker has gained a foothold, for example through phishing or a compromised low-privilege account.
Microsoft · Windows Storage VSP Driver
A heap-based buffer overflow in the Windows Kernel-Mode Drivers allows a local user with low privileges to elevate privileges to SYSTEM. Exploitation requires a local logon or code running as a standard user, and no user interaction. Windows 10 Version 1607 and Windows Server 2016 are no longer receiving security updates from Microsoft as of October 13, 2026, so this issue is likely to remain unpatched on those systems unless they are covered by an extension.
Microsoft · Windows 10 1607
Research and translation in progress – available shortly.
The Microsoft Windows Search Component contains a heap-based buffer overflow that allows an authorized local user to elevate privileges. A successful attacker can gain SYSTEM-level rights, which affects confidentiality, integrity and availability. Exploitation requires local access with low privileges, and user interaction may be part of the attack chain. Microsoft has released fixes, and no public exploit or in-the-wild exploitation has been reported.
Microsoft · Windows Search Component
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows Remote Access Connection Manager component allows an authorized local user with low privileges to elevate their privileges. Microsoft rates the flaw at CVSS 3.1 7.8 (High). Exploitation requires a valid local account and is not directly reachable from the internet. Microsoft has released fixes for the affected builds.
Microsoft · Windows
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A Python component in Windows 10 Version 1607 contains an improper privilege management flaw that allows an authorized local user to elevate privileges. The attacker needs a valid low-privilege local account and no user interaction, so the flaw is not reachable from the internet. Microsoft's CVSS 3.1 score is 7.8 (High), and the impact is rated total on confidentiality, integrity and availability. Windows 10 1607 also loses regular security updates on 13 October 2026, so devices on this version remain exposed unless they are covered by ESU.
Microsoft · Windows 10 1607
A use-after-free flaw in the Windows Clipboard User Service allows an authorized local attacker to elevate privileges. Microsoft rates the attack complexity as high and the user interaction as none, and says an attacker could raise privileges from low to medium integrity level. Windows 10 Version 1607 and Windows Server 2016 are affected; attackers need local access and low privileges, so the risk is mainly for shared systems or hosts where malware or a phished user already has a foothold.
Microsoft · Windows 10 1607
A use-after-free flaw in the Windows Clipboard User Service allows an authorized local user to elevate privileges. An attacker needs a valid low-privilege account on the affected machine, and the attack complexity is high. Successful exploitation could give the attacker full control over the system, which is most relevant on shared, multi-user or special-purpose devices.
Microsoft · Windows
A use-after-free flaw in the Windows Message Queuing (MSMQ) Queue Manager allows an authorized local attacker with low privileges to elevate privileges. The issue affects systems where the MSMQ Queue Manager service is enabled. Vendor data indicates local attack only (AV:L), and Microsoft rates it Important with CVSS 7.8.
Microsoft · Windows
Research and translation in progress – available shortly.
An out-of-bounds read in the Windows Win32 Kernel Subsystem allows an authorized local attacker to elevate privileges to SYSTEM. The attacker needs an existing local user account and the attack is rated as high complexity. Remote exploitation is not described in the advisory data. The official vector also shows a scope change, which Microsoft's details should be checked for.
Microsoft · Windows Win32 Kernel Subsystem
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Windows SmartScreen, the reputation-based filter that checks downloaded files, apps and web content, contains a use-after-free flaw (CWE-416). An authorized local user can exploit it to elevate privileges on the affected system. Exploitation requires local access and, according to press reports, winning a race condition. Reports describe the impact as an increase from low to medium integrity level; this is not confirmed by the vendor in the sources reviewed.
Microsoft · Windows
