A local elevation of privilege vulnerability in the Windows Kernel of Windows 11 version 26H1 allows an authorized attacker to gain higher privileges on the system. The flaw is classified as CWE-763 (release of invalid pointer or reference). An attacker needs a valid local low-privilege account or existing code execution on the machine, so the realistic risk is a compromised user account, malware, or a shared multi-user host such as a terminal server.
Microsoft · Windows 11 26H1
The Windows AppX Deployment Service (AppXSVC) on Windows 10, Windows 11 and Windows Server contains an improper link resolution flaw (CWE-59) before file access. An authorized local user with low privileges can exploit it to gain higher privileges, with high impact on confidentiality, integrity and availability. Remote exploitation is not indicated; the attacker needs local access to the affected system.
Microsoft · Windows AppX Deployment Service
A heap-based buffer overflow in the Windows Background Intelligent Transfer Service (BITS) allows an authorized local user with low privileges to elevate their privileges. Successful exploitation would give an attacker high impact on confidentiality, integrity and availability of the affected system. The attack requires local access and a valid low-privileged account, so it is not directly reachable from the internet.
Microsoft · Windows
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A local elevation of privilege vulnerability (CWE-908, Use of Uninitialized Resource) exists in the Windows Background Intelligent Transfer Service (BITS). An authorized, low-privileged local attacker can gain higher privileges on the affected system, with a CVSS v3.1 base score of 7.8 (High). The vulnerability is not remotely exploitable, so the main risk is a valid low-privilege account or malware already running on a workstation or server.
Microsoft · Windows
Windows Image Acquisition (WIA) contains an externally controlled format string weakness (CWE-134) that allows an authorized local user to elevate privileges. An attacker needs an existing local account and no user interaction is required. Microsoft rates the flaw CVSS 7.8 (High) because a successful escalation grants full confidentiality, integrity and availability impact.
Microsoft · Windows Image Acquisition
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A local out-of-bounds read in the Windows Kernel allows an authorized attacker to elevate privileges on the affected system. The attacker needs a low-privileged account or foothold on the machine first, so the flaw is not directly reachable from the internet. Successful exploitation gives full control over the system, and attackers often combine such flaws with other vulnerabilities.
Microsoft · Windows Kernel
A use-after-free flaw in the Windows kernel allows an authorized local user to elevate privileges. An attacker needs a foothold on the system with low privileges first, for example through malware or stolen credentials. The CVSS base score is 7.8 (High), and the vector assumes full impact on confidentiality, integrity and availability.
Microsoft · Windows 11
Research and translation in progress – available shortly.
Microsoft Windows Modern Device Management (MDM) contains a use-after-free vulnerability (CWE-416) that allows an authorized local attacker to elevate privileges on the host. The attacker needs local access and low privileges, so the main risk comes from users or malware that already have a foothold on a workstation or server. Successful exploitation can lead to a full loss of confidentiality, integrity and availability on the affected system. Microsoft rates the CVSS base score at 7.8 (High).
Microsoft · Windows Modern Device Management
A heap-based buffer overflow in the Windows Background Intelligent Transfer Service (BITS) allows an authorized local attacker to elevate privileges. The attacker needs local access and an existing low-privilege account; the flaw is not reachable over the network. Microsoft rates it Important (CVSS 3.1 base score 7.8) and a patch is available.
Microsoft · Windows
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A double free (CWE-415) in the Windows Wired AutoConfig Service allows an authorized local attacker to elevate privileges. The attacker needs a valid low-privileged account or code already running on the affected system. Successful exploitation would give full control over the affected confidentiality, integrity and availability, according to the CVSS vector.
Microsoft · Windows
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows exFAT File System driver allows an authenticated local attacker to elevate privileges, potentially to SYSTEM. The attacker needs low privileges and no user interaction. Systems where users can mount exFAT removable media or where several users log on locally are most exposed. The CVSS base score is 7.8 (High).
Microsoft · Windows 10 Version 1607
Research and translation in progress – available shortly.
The Universal Disk Format File System Driver (UDFS) in Windows, which handles UDF volumes such as optical media and disk images, contains a use-after-free flaw. A local attacker with a low-privilege account can exploit it to elevate privileges, with full impact on confidentiality, integrity and availability. The attack requires local access and is not internet-facing. Third-party data classifies the flaw as a buffer overflow (CWE-190, CWE-122), which conflicts with the vendor description.
Microsoft · Windows 10 Version 1607
