New vulnerabilities – clearly explained

Windows MIDI Service Module Information Disclosure Vulnerability

Research and translation in progress – available shortly.

Windows: Use-after-free in Camera Frame Server Monitor allows privilege escalation

A use-after-free flaw in the Windows Camera Frame Server Monitor component allows an attacker to elevate privileges. According to the CNA record, the attacker needs adjacent network access, no privileges and no user interaction, which is an unusual combination for an elevation-of-privilege bug and should be confirmed on MSRC. Successful exploitation could give the attacker high impact on confidentiality, integrity and availability.

Microsoft · Windows

Microsoft Windows: Heap-based buffer overflow in Text Shaping

A heap-based buffer overflow in the Windows Text Shaping component allows code execution. The CVSS vector published by NVD describes a network attack without privileges or user interaction, but Zero Day Initiative describes the attack as requiring an authorized local attacker. Until the Microsoft advisory settles the attack vector, treat the issue as critical.

Microsoft · Windows

Microsoft OpenSSH for Windows: Use-after-free allows local privilege escalation

Microsoft OpenSSH for Windows contains a use-after-free weakness (CWE-416) that allows an authorized local user to elevate privileges. The attack requires local access and a low-privileged account; there is no network attack vector. Risk is highest on multi-user servers and jump hosts where OpenSSH for Windows is enabled.

Microsoft · OpenSSH for Windows

Microsoft Windows Kernel: Heap-based buffer overflow allows local privilege escalation

A heap-based buffer overflow in the Windows Kernel allows an authorized local attacker to elevate privileges. The attacker needs an existing low-privilege foothold on the system, for example through a user account, an insider or a phishing payload that runs code first. The impact is rated total for confidentiality, integrity and availability (CVSS 3.1: 7.8).

Microsoft · Windows

Microsoft Windows: Elevation of privilege in Windows Installer via stack overflow

A stack-based buffer overflow in Windows Installer, the Windows component that installs, repairs and removes software packages, allows an authorized local user to elevate privileges. The attacker needs a valid low-privileged account or code already running on the device. Microsoft rates the flaw CVSS 7.8 (High), and the CVE record lists no exploitation details.

Microsoft · Windows

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Windows Input System: Type confusion allows local privilege escalation

A type confusion flaw in the Windows Input System of Windows 10 version 1809 and Windows Server 2019 allows an attacker with a local, low-privileged account to elevate privileges. No user interaction is required, and the impact on confidentiality, integrity and availability is high (CVSS 7.8). The risk is mainly on shared systems, terminal servers and kiosks where an attacker already has a standard user account or a session. CISA's SSVC assessment lists exploitation as none and the issue as not automatable.

Microsoft · Windows 10 1809

Microsoft Windows Win32k: Use-after-free leads to local privilege escalation

A use-after-free flaw in the Win32k kernel-mode graphics subsystem of Microsoft Windows allows an authorized local user to elevate privileges. An attacker with a low-privileged local account could gain SYSTEM rights, which would give full control over the affected host. Remote exploitation is not possible without a prior local logon.

Microsoft · Windows

Microsoft Windows Win32 Kernel: Use-after-free leads to local privilege escalation

A use-after-free flaw (CWE-416) in the Windows Win32 Kernel Subsystem allows an authorized local attacker to elevate privileges. The attacker needs a valid low-privileged account on the system and no user interaction is required. The flaw is not internet-facing, but an attacker or malware with a foothold on a workstation or server could gain SYSTEM rights.

Microsoft · Windows

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows Encrypting File System (EFS): Remote code execution vulnerability

A code injection flaw (CWE-94) in the Windows Encrypting File System (EFS) allows an attacker with low privileges to execute code over the network. Successful exploitation would give the attacker full control over confidentiality, integrity and availability of the affected system (CVSS 3.1: 8.8). Microsoft describes the attacker as authorized, and the sources do not state whether the attack path is reachable from the internet.

Microsoft · Windows Encrypting File System (EFS)

Microsoft Windows 10: Heap-based buffer overflow in Windows Error Reporting

A heap-based buffer overflow in the Windows Error Reporting component of Windows 10 Version 1607 and other listed Windows and Windows Server versions allows code execution. An attacker needs local access with low privileges, for example through a compromised user account. A successful attack would affect the confidentiality, integrity and availability of the system.

Microsoft · Windows 10 Version 1607

Windows Win32k: Heap-based buffer overflow enables local privilege escalation

A heap-based buffer overflow in the Windows Win32k kernel component allows an authorized local attacker to elevate privileges. Successful exploitation gives the attacker higher privileges on the affected system and, if chained with malware or phishing, potentially full control of the endpoint. The attacker needs local access and low privileges; the flaw cannot be exploited remotely.

Microsoft · Windows

Microsoft Windows: Use-after-free in Win32 kernel subsystem allows privilege escalation

A use-after-free flaw (CWE-416) in the Win32 kernel subsystem of Windows allows a local, authorized user to elevate privileges to a higher level, with a CVSS 3.1 score of 7.8. The attacker needs a valid low-privilege account and local access, but no user interaction. The main risk is a privilege-escalation step after phishing, stolen credentials or malware has gained a foothold on a system.

Microsoft · Windows

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

OpenSSH for Windows: Heap-based buffer overflow allows remote code execution

Microsoft's Windows port of OpenSSH, which includes the built-in SSH client and server, contains a heap-based buffer overflow. An unauthorized attacker can exploit it over the network to execute code. According to the CVE record, exploitation requires user interaction and has high attack complexity (CVSS 3.1: 7.5). CISA SSVC lists no known exploitation and marks the issue as not automatable.

Microsoft · OpenSSH for Windows

Microsoft Windows Camera Frame Server Monitor: Heap-based buffer overflow allows privilege escalation

A heap-based buffer overflow in the Windows Camera Frame Server Monitor allows an authorized local attacker with low privileges to elevate privileges to a higher level. Successful exploitation would give the attacker high impact on confidentiality, integrity and availability of the affected system. The attacker needs local access and a valid low-privileged account; the vulnerability is not directly reachable from the internet. CISA SSVC data reports no known exploitation and no automatable exploitation.

Microsoft · Windows Camera Frame Server Monitor

Microsoft Windows Installer: Elevation of privilege via use-after-free

A use-after-free flaw in the Windows Installer component allows an authorized local attacker to elevate privileges. The CNA record lists Windows 10 1607, Windows Server 2016, several newer Windows 10 and 11 builds, and Windows Server 2012 and 2012 R2. Exploitation requires local access with low privileges and high attack complexity, with a CVSS 3.1 base score of 7.0 (High). Remote exploitation is not described.

Microsoft · Windows Installer

Microsoft Windows 11: Local privilege escalation in Windows MIDI Service Module

A use-after-free vulnerability in the Windows MIDI Service Module of Windows 11 allows an authorized local user to elevate privileges. Exploitation requires a local session with low privileges and high attack complexity. The vulnerability is not reachable from the internet.

Microsoft · Windows 11

Microsoft Windows: Local privilege escalation via race condition in Error Reporting

A time-of-check time-of-use race condition in Windows Error Reporting allows a local attacker with existing access to elevate privileges. The attacker must already have a logon on the affected system and must win a timing race. The CVSS 3.1 base score is 7.0 (High), and no public exploit code or active exploitation is known.

Microsoft · Windows

Windows: Use-after-free in Overlay Filter enables local privilege escalation

A use-after-free vulnerability in the Windows Overlay Filter component allows an authorized local attacker to elevate privileges. The advisory lists many Windows 10, Windows 11 and Windows Server builds, while the CVE record's CPE lists only Windows 10 1607. Exploitation requires an existing low-privileged account and high attack complexity, so the risk is mainly as a second stage after a user session has been obtained, for example through phishing or a stolen credential.

Microsoft · Windows

Microsoft Windows Error Reporting: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Windows Error Reporting (WER) allows an unauthenticated attacker on the network to execute code with a CVSS score of 9.8 (critical). No user interaction is required according to the CVSS vector. Windows 10 Version 1607 (Enterprise LTSB 2016) and Windows Server 2016 are affected up to the fixed builds listed below; Windows 10 1607 reached end of support on 13 October 2026.

Microsoft · Windows 10 Version 1607 / Windows Server 2016