New vulnerabilities – clearly explained

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Skype for Business Server: Absolute path traversal allows privilege escalation

Absolute path traversal in Skype for Business Server and Microsoft Lync allows an authorized attacker with network access to elevate privileges. The CVSS 3.1 base score is 8.1 (High), with high impact on integrity and availability. NVD status was still Awaiting Analysis at the time of research, and the vendor's own advisory page could not be verified.

Microsoft · Skype for Business Server

Windows: Use-after-free in Internet Explorer allows local privilege escalation

A use-after-free flaw (CWE-416) in the Internet Explorer component of Windows allows an authorized local user to elevate privileges. The attacker needs a low-privileged logon and high attack complexity applies, but no user interaction is required. The CVSS score is 7.8 (High), and the impact on confidentiality, integrity and availability is rated high.

Microsoft · Windows

Microsoft Windows Hello: Elevation of privilege via use after free

Windows Hello, the biometric and PIN sign-in component of Windows, contains a use-after-free weakness (CWE-416) that allows a local attacker with low privileges to elevate their rights. Microsoft lists the issue with maximum severity Important and a CVSS 3.1 base score of 7.0. Exploitation requires local access and a low-privilege account, and the attack is considered hard to carry out.

Microsoft · Windows Hello

Windows Bluetooth Service: Use after free allows remote code execution

A use-after-free flaw (CWE-416) in the Windows Bluetooth Service allows an unauthorized attacker to execute code. The attacker needs to be within Bluetooth range of the affected system, which is an adjacent network attack, and no privileges or user interaction are required. Microsoft rates the severity as Important (CVSS 3.1 base score 7.5), but Microsoft and CISA SSVC assess exploitation as unlikely and no public exploit is known.

Microsoft · Windows 10 Version 1809

Windows Ancillary Function Driver for WinSock: Use after free, privilege escalation

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows a locally authorized attacker to elevate privileges. An attacker needs an existing low-privileged foothold, such as a phished user account, malware, or a compromised account on a shared or terminal server. Microsoft rates the issue Important with a CVSS 3.1 score of 7.0 (AV:L/AC:H/PR:L).

Microsoft · Windows

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 21h2

Research and translation in progress – available shortly.

Windows Kernel: Local privilege escalation via invalid pointer or reference

A flaw in the Windows kernel (CWE-763, release of invalid pointer or reference) allows an authorized local attacker to elevate privileges. An attacker with a valid, low-privileged local account could gain higher rights, potentially SYSTEM, on the affected host. Remote exploitation is not described, and the attack requires local logon or code execution.

Microsoft · Windows Kernel

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows 10 1607: Use-after-free in Win32k allows local privilege escalation

A use-after-free flaw in the Win32k kernel-mode graphics subsystem of Windows 10 1607 and Windows Server 2016 allows an authorized local user to elevate privileges. An attacker needs an existing low-privilege foothold on the system, such as a compromised account or malware, but no user interaction is required. Once exploited, the impact on confidentiality, integrity and availability is high.

Microsoft · Windows 10 1607

Windows Hyper-V: Spoofing vulnerability due to improper input validation

A spoofing vulnerability in the Windows Hyper-V virtualization component stems from improper validation of the syntactic correctness of input. An authorized local attacker with low privileges can exploit it without user interaction and affect confidentiality, integrity and availability with a changed scope (CVSS 8.8). Only hosts with the Hyper-V role are relevant, and the vulnerability is not internet-exposed.

Microsoft · Windows Hyper-V

Microsoft Windows: Local privilege escalation via buffer over-read in Overlay Filter

A buffer over-read in the Windows Overlay Filter in several Windows 10, Windows 11 and Windows Server versions allows an authorized attacker to elevate privileges locally (CVSS 7.8, High, CWE-126). The attacker needs a low-privileged local account and no user interaction, so the flaw is not directly exploitable from the internet. A successful attack could affect confidentiality, integrity and availability of the affected host, and is most relevant on multi-user servers and terminal servers.

Microsoft · Windows

Windows DWM Core Library: Use-after-free allows local privilege escalation

The Windows Desktop Window Manager (DWM) Core Library contains a use-after-free vulnerability (CWE-416). An authorized local user with low privileges can exploit it to elevate privileges, potentially to full system control. Remote exploitation is not possible, and the CVSS base score is 7.8 (High).

Microsoft · Windows DWM Core Library

Microsoft Windows Search Component: Remote code execution via heap buffer overflow

A heap-based buffer overflow in the Microsoft Windows Search Component allows an unauthenticated attacker to execute code remotely over a network. According to the vendor's advisory, user interaction is required, typically a user opening a specially crafted file. The CVSS base score is 8.8 (High). No exploitation is known so far.

Microsoft · Windows

Windows Management Instrumentation: Heap overflow enables local privilege escalation

A heap-based buffer overflow in Windows Management Instrumentation (WMI) allows an authorized local attacker to elevate privileges. The attacker needs a valid low-privilege account on the affected system and cannot exploit the flaw remotely. Successful exploitation can lead to administrator or SYSTEM rights and enable wider compromise of the host.

Microsoft · Windows Management Instrumentation

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows 10 1607: Use after free in Local Security Authority Server

A use-after-free flaw in the Local Security Authority Server (lsasrv) of Windows 10 Version 1607 allows an authorized local attacker to elevate privileges. Exploitation requires a low-privileged local account and a high attack complexity. Successful exploitation can lead to full control of the affected system.

Microsoft · Windows 10 1607

Microsoft Windows Win32k: Use-after-free leads to local privilege escalation

A use-after-free vulnerability in the kernel-mode Win32k component of Windows allows a local attacker to elevate privileges, potentially to SYSTEM. The attacker needs local access and low privileges, so the bug is not remotely exploitable without an existing foothold. Microsoft lists affected builds for Windows 11 24H2, 25H2, 26H1, 26H2 and Windows Server 2025.

Microsoft · Windows

Windows 11 26H1: Use-after-free in Kerberos allows local privilege escalation

A use-after-free flaw (CWE-416) in the Windows Kerberos component of Windows 11 version 26H1 allows an authorized local user to elevate privileges. An attacker needs a valid low-privilege account and local access, and the attack complexity is high. Successful exploitation can compromise confidentiality, integrity and availability of the affected machine.

Microsoft · Windows 11 26H1

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Windows 10 1607: Use-after-free in Windows Installer allows privilege escalation

Windows Installer in Windows 10 Version 1607 contains a use-after-free flaw (CWE-416) that allows local privilege escalation. An authorized local user who can run a crafted installer or MSI package may gain higher privileges, potentially up to SYSTEM. The attack is not internet-facing and requires a local logon; the NVD CVSS 3.1 score is 7.0 (High).

Microsoft · Windows 10 1607

Microsoft Windows Installer: Use-after-free leads to privilege escalation

A use-after-free flaw (CWE-416) in Windows Installer allows an authorized, locally logged-on attacker to elevate their privileges. Exploitation requires a foothold on the system, for example through a phished low-privilege user or a compromised service account, and the attack complexity is rated high. The flaw is not remotely exploitable. Microsoft has not reported public disclosure or active exploitation.

Microsoft · Windows Installer

Windows Hyper-V: Heap-based buffer overflow

A heap-based buffer overflow in Windows Hyper-V allows an authorized local attacker to execute code. The attacker needs local access with low privileges, and because the scope changes, an escape from a guest VM can affect the host. The flaw is not directly internet-facing, and no public exploit or evidence of exploitation was found.

Microsoft · Windows Hyper-V

Windows: Missing authentication in Windows Error Reporting allows local tampering

A missing authentication check for a critical function in Windows Error Reporting (WER) allows an authorized local user to tamper with WER data. The attacker needs a low-privilege account on the affected machine, so the flaw is not reachable from the internet. The CVSS base score is 7.1 (High) in NVD and the CNA record, while one mirror shows 5.8 (Medium), so the severity is not yet settled.

Microsoft · Windows