New vulnerabilities – clearly explained

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows Performance Monitor: Code injection allows local privilege escalation

Windows Performance Monitor contains a code injection flaw (CWE-94) that allows an authorized local user to elevate privileges. The attack requires a valid local low-privilege account and no user interaction, and the CVSS score is 7.8 (High) with a high impact on confidentiality, integrity and availability. The affected versions include supported Windows 10, Windows 11, Windows Server 2012, 2012 R2 and 2016 builds, and Microsoft has published a security update.

Microsoft · Windows Performance Monitor

Windows Installer: Heap-based buffer overflow allows local privilege escalation

Microsoft Windows Installer, the component that installs, maintains and removes MSI packages, contains a heap-based buffer overflow (CWE-122). A local user with low privileges can exploit it to gain higher privileges, with high impact on confidentiality, integrity and availability. It is not a remote entry point and requires local access, for example after phishing has already provided code execution.

Microsoft · Windows Installer

Microsoft Windows 11 23h2

Research and translation in progress – available shortly.

Microsoft Windows: Out-of-bounds read in Windows Volume Manager Extension Driver

A local out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges on the affected system. The attacker needs a valid low-privilege user account on the machine, so the flaw is not reachable remotely. Microsoft rates it as High (CVSS 3.1 7.8), and CISA's SSVC data records no known exploitation.

Microsoft · Windows

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows 10 1607: Information disclosure in Print Spooler Components

Windows Print Spooler Components on Windows 10 Version 1607 and Windows Server 2016 contains an out-of-bounds read flaw (CWE-125). An unauthenticated attacker on the network can disclose information without user interaction. Microsoft says heap memory from a privileged process on a server could be exposed. Only confidentiality is affected.

Microsoft · Windows 10 1607

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows 10 Hyper-V: Privilege escalation via link following

A link-following flaw (CWE-59) in Windows Hyper-V allows an authorized local user to elevate privileges. The attacker needs a low-privileged local account and no user interaction. The CVSS 3.1 base score is 7.8 (High), with high impact on confidentiality, integrity and availability. Windows 10 Version 1607 (LTSB 2016) reached end of support on 13 October 2026, so fixes for it depend on ESU.

Microsoft · Windows 10 Version 1607

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows 10 Version 1607: Heap-based buffer overflow in USB video driver

A heap-based buffer overflow in the Windows USB Video Driver allows an authorized local user to elevate privileges to SYSTEM. The CNA record lists several Windows client and server versions as affected; this entry focuses on Windows 10 Version 1607, which is the product in the NVD CPE match. An attacker needs local access and low privileges, for example through a phished or compromised user account, so this is not an internet-facing, unauthenticated risk.

Microsoft · Windows 10 Version 1607

Microsoft Office Click-to-Run: Local privilege escalation via use-after-free

A use-after-free flaw in Microsoft Office Click-to-Run allows an attacker with local access and a low-privilege account to elevate privileges on the affected machine. The CVSS vector (AV:L/AC:L/PR:L/UI:N) shows no remote or unauthenticated attack path. The main risk is use as a second stage after malware or a phished user has code running as that user. NVD scores the flaw 7.8 (High), while VulDB and EUVD show lower scores.

Microsoft · Office Click-to-Run

Windows RRAS: Remote code execution in Routing and Remote Access Service

A remote code execution vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an attacker to run code on the affected machine. The CVE record lists CWE-122 (heap-based buffer overflow) and CWE-191 (integer underflow) as weakness types, and CVSS 3.1 rates it 8.8 (High). Microsoft's CVSS vector requires no privileges, but user interaction (UI:R) is needed. CISA SSVC assesses exploitation as 'none' and automatable as 'no'.

Microsoft · Windows RRAS

Microsoft Graphics Component: Out-of-bounds read leads to local privilege escalation

A out-of-bounds read in the Microsoft Graphics Component of Windows allows an attacker with local access and a low-privilege account to elevate privileges. No user interaction is required. The CVSS 3.1 base score is 7.8 (High), and the impact is rated total for confidentiality, integrity and availability. Windows Server 2019 is affected as well, and the risk is highest on shared or multi-user systems.

Microsoft · Windows 10 1809

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows Message Queuing: Out-of-bounds read causes information disclosure

The Queue Manager of Windows Message Queuing (MSMQ) contains an out-of-bounds read (CWE-125). A remote, unauthenticated attacker can send crafted traffic to the MSMQ service over the network and read parts of memory, which can expose sensitive data. Integrity and availability are not affected, and no user interaction is required. Exposure is mainly a concern for systems where MSMQ is enabled and reachable from untrusted networks.

Microsoft · Windows Message Queuing

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows Device Association Service: Use-after-free leads to privilege escalation

The Windows Device Association Service in multiple Windows 10, Windows 11 and Windows Server releases contains a use-after-free flaw (CWE-416). A local attacker with low privileges and an authorized account can exploit it to gain elevated rights, potentially up to SYSTEM. No user interaction is required, and the flaw is not reachable from the internet by itself. Microsoft has not marked it as publicly disclosed, and no exploitation has been reported.

Microsoft · Windows

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Windows 10 1607: Print Spooler heap overflow allows local privilege escalation

Windows Print Spooler Components in Windows 10 Version 1607 contain a heap-based buffer overflow. An authorized local user with low privileges can exploit it to gain higher privileges on the system. Exploitation requires local access, so an attacker first needs a foothold, for example through a phished user or malware. Microsoft states that the vulnerability is not exploited.

Microsoft · Windows 10 1607

Microsoft AD FS: Denial of service via excessive memory allocation

Active Directory Federation Services (AD FS), a Windows Server role for federated sign-in and single sign-on, contains a memory allocation with an excessive size value. An unauthorized attacker on the network can cause a denial of service, so AD FS sign-in becomes unavailable. No privileges or user interaction are required, and the impact is limited to availability. Exposure is highest for AD FS servers published to the internet.

Microsoft · Active Directory Federation Services