New vulnerabilities – clearly explained

Microsoft Windows 10 21h2

Research and translation in progress – available shortly.

Microsoft Windows 11 23h2

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Windows Direct Composition: Heap buffer overflow allows local privilege escalation

A heap-based buffer overflow in the Windows Direct Composition graphics component allows an authorized local user to elevate privileges. An attacker needs a low-privileged account or code running on the affected system, for example after phishing or malware running as a standard user. Successful exploitation can give full control over confidentiality, integrity and availability.

Microsoft · Windows

Windows: Heap-based buffer overflow in Direct Composition enables privilege escalation

A heap-based buffer overflow (CWE-122) in the Windows Direct Composition graphics component allows privilege escalation on affected Windows 10, Windows 11 and Windows Server systems. An attacker needs local access and an authenticated low-privilege account or code execution on the machine. Successful exploitation could give the attacker higher privileges, with a CVSS 3.1 base score of 7.8 (High).

Microsoft · Windows

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 11 23h2

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows Direct Composition: Heap-based buffer overflow allows local privilege escalation

A heap-based buffer overflow in the Windows Direct Composition graphics component allows a local attacker with a low-privilege logged-on account to elevate privileges. Successful exploitation can lead to full compromise of the affected host. The component is not reachable from the internet, so an attacker first needs a foothold on the system, for example through phishing or malicious user code.

Microsoft · Windows 10 Version 1607

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Word: Remote code execution via stack-based buffer overflow

A stack-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps and Office, allows code execution. An attacker who gets a victim to open a crafted Word document can run code with the victim's rights. No privileges are required, but user interaction is needed. The CVSS 3.1 base score is 8.8 (High).

Microsoft · 365 Apps

Microsoft Windows DNS Server: Remote code execution via invalid pointer

A flaw (CWE-763, release of invalid pointer or reference) in the Windows DNS Server component allows code execution on the server over the network. According to Microsoft, an authenticated attacker with low-level access to an affected server can send a specially crafted request to execute code, and no user interaction is required. The CVSS base score is 8.8 (High). Exposure to the internet is not indicated; the threat is mainly from insiders, compromised low-privilege accounts or attackers already inside the network.

Microsoft · Windows DNS Server

Microsoft Windows: Elevation of privilege in CD-ROM driver

A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges, according to the CNA record. The CNA describes the attack as possible over a network, but the research notes say no source confirms direct internet exposure of the driver, so an attacker likely needs an existing foothold. Sources disagree on the CVSS score (9.8 in the provided data and some feeds, 6.5 in others), so the severity is unresolved until NVD or MSRC confirms the vector.

Microsoft · Windows

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 11 23h2

Research and translation in progress – available shortly.

Microsoft Windows 11 24h2

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 10 1607: Use-after-free in Win32k allows privilege escalation

Windows 10 Version 1607 contains a use-after-free flaw (CWE-416) in the Win32k kernel component. A logged-on user with an ordinary account can exploit it to gain higher, SYSTEM-level privileges on the same machine. Network access is not required, but an attacker first needs a local foothold, for example through phishing or malware running as a normal user.

Microsoft · Windows 10 1607

Microsoft Windows Kernel: Heap-based buffer overflow allows local privilege escalation

A heap-based buffer overflow in the Windows Kernel affects several Windows 10, Windows 11 and Windows Server releases. An authorized local attacker with low privileges can elevate their privileges. The attack is not reachable directly from the internet and requires an existing foothold on the system, for example through phishing or a stolen credential.

Microsoft · Windows Kernel

Windows exFAT File System: Heap overflow enables local privilege escalation

A heap-based buffer overflow in the Windows exFAT File System driver allows local privilege escalation. An attacker who already has a low-privilege account on the affected Windows system can gain higher privileges. Microsoft rates the CVE 7.8 (High), but reports no public disclosure and no exploitation, and assesses exploitation as unlikely.

Microsoft · Windows exFAT File System