A resource allocation flaw in the SignalR libraries of ASP.NET Core allows an unauthenticated remote attacker to deny service. Clients that reconnect in a specific stateful state can indefinitely block broadcasts and keep server resources allocated. The attack requires no login and no user interaction, so an exposed SignalR endpoint of a public web application can be targeted directly. Impact is limited to availability; no data theft or code execution is indicated.
Microsoft · ASP.NET Core SignalR
The Routing and Remote Access Service (RRAS) in several supported Windows 10, Windows 11 and Windows Server versions contains a double-free flaw (CWE-415) that allows remote code execution. According to the CVSS vector (8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), an attacker on the network needs only low privileges and no user interaction, and could gain unauthorized access with high impact on confidentiality, integrity and availability. The issue matters only where RRAS is installed and reachable, for example as a VPN gateway or router. Microsoft has released fixes, and no exploitation has been reported.
Microsoft · Windows Routing and Remote Access Service (RRAS)
A heap-based buffer overflow (CWE-122) in the Windows System Information Console allows an unauthenticated attacker to execute code remotely over the network. The CVSS 3.1 base score is 9.8 (critical), with no privileges or user interaction required. The exact network service needed to trigger the flaw is not documented in the sources reviewed.
Microsoft · Windows System Information Console
A use-after-free vulnerability (CWE-416) in the Microsoft Windows Search Component allows an authenticated local user to elevate privileges. An attacker needs a valid low-privilege logon or code running as such a user on the target system. Successful exploitation can lead to full control of the affected system. Microsoft has released a fix, and no public disclosure or known exploitation was reported at release.
Microsoft · Windows Search Component
A memory leak in the Windows DNS component allows an unauthenticated attacker on the network to exhaust server memory and cause a denial of service. The attack requires no user interaction and no privileges. Confidentiality and integrity are not affected, but a DNS outage can disrupt Active Directory logons and internal services.
Microsoft · Windows DNS Server
A heap-based buffer overflow in the Microsoft PostScript Printer Driver of Windows allows an unauthenticated attacker to execute code over the network. The CVSS score is 9.8 (critical). Exploitation requires no user interaction, for example by sending a specially crafted print job or packet to an affected print service.
Microsoft · Windows PostScript Printer Driver
A use-after-free flaw (CWE-416) in the Windows Direct Composition component allows an authorized local user to elevate privileges. An attacker needs an existing low-privilege account and local access, so the flaw is not directly reachable from the internet. The CVSS 3.1 base score is 7.8 (High), and successful exploitation would give the attacker high impact on confidentiality, integrity and availability.
Microsoft · Windows
A use-after-free vulnerability (CWE-416) in the Microsoft Windows Search Component allows an authorized local user to elevate their privileges. The CVSS 3.1 score is 7.0 (High) with a local attack vector, low privileges required and high attack complexity. An attacker needs an existing logon or code execution on the affected system, so the vulnerability is not remotely exploitable.
Microsoft · Windows
The Windows Client Side Caching driver (csc.sys) contains a vulnerability that is described as an information disclosure in the NVD record, while Microsoft classifies it as an elevation of privilege. An attacker needs local access and valid logon credentials, so the threat is mainly a user or malware already on an endpoint. Microsoft rates the severity as Important and the CVSS score is 8.8; the sources disagree on the bug class and the attack vector, so the impact is not fully confirmed.
Microsoft · Windows csc.sys
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Microsoft PostScript Printer Driver allows an unauthenticated attacker to execute code over the network. The flaw is triggered when the affected driver processes a specially crafted print job or packet sent to an affected print service. CVSS 3.1 rates it 9.8 (critical) with low attack complexity and no user interaction required, and CISA SSVC rates the technical impact as total.
Microsoft · PostScript Printer Driver
A use-after-free flaw in the Win32k kernel subsystem of Windows 11 and Windows Server 2025 allows an attacker with a local, authorized account to elevate privileges. Successful exploitation can give the attacker SYSTEM rights, with high impact on confidentiality, integrity and availability. The attack requires local access and high attack complexity, and it is not reachable from the internet.
Microsoft · Windows Win32k
A heap-based buffer overflow in the Windows Network File System (NFS) component allows an authorized attacker to execute code locally. The attacker needs a local account with low privileges and no user interaction, and the NVD/CVSS data (AV:L, CVSS 7.8) rates the impact on confidentiality, integrity and availability as high. The Microsoft CNA title refers to Remote Code Execution, so the attack vector should be confirmed against the MSRC advisory.
Microsoft · Windows Network File System
An untrusted search path in the Windows Update Service allows an authorized local attacker to elevate privileges. The attacker needs a foothold on the affected system with low privileges, and no user interaction is required. The impact on confidentiality, integrity and availability is rated high.
Microsoft · Windows
Research and translation in progress – available shortly.
A use-after-free vulnerability (CWE-416) in the Windows Audio Service allows an authorized local user to elevate privileges. An attacker needs a valid low-privilege account on the system and must meet a high-complexity condition. The flaw cannot be reached directly from the internet, but it is a relevant follow-up step after a compromise, especially on terminal servers and shared workstations.
Microsoft · Windows
A heap-based buffer overflow in the Windows Update Service allows an authorized local user to elevate privileges on affected Windows 10, Windows 11 and Windows Server systems. The attacker needs an existing low-privileged session or code execution on the machine; no remote attack path is described. Successful exploitation can lead to full compromise of confidentiality, integrity and availability.
Microsoft · Windows
A heap-based buffer overflow in the Windows OLE component allows a locally authorized user with low privileges to elevate their privileges, potentially to SYSTEM. An attacker needs an existing foothold on the device, for example through phishing, a malicious document or a stolen low-privilege account. The CVSS vector rates the impact on confidentiality, integrity and availability as high.
Microsoft · Windows OLE
Research and translation in progress – available shortly.
A use-after-free vulnerability (CWE-416) in the Windows Search Component allows an authorized local attacker to elevate privileges. An attacker needs a valid low-privileged account on the affected machine, and CISA rates the technical impact as total. The flaw is not remotely exploitable.
Microsoft · Windows Search Component
Research and translation in progress – available shortly.
A use-after-free flaw in the Windows Event Tracing component allows a local, authorized attacker to elevate privileges on affected Windows systems. Exploitation requires high complexity conditions and an existing low-privilege account on the machine, so the attacker must already have a foothold. Microsoft has released fixes, and the CVSS base score is 7.0 (High).
Microsoft · Windows
A flaw in the Windows SMB Server component (file and printer sharing) allows resource allocation without limits or throttling (CWE-770). An unauthenticated attacker on the network can cause a denial of service, which can crash or stall the SMB service on affected systems. The attack needs no privileges or user interaction and does not grant access to data.
Microsoft · Windows SMB Server
A heap-based buffer overflow in the Windows Portable Device File System Driver allows an authorized local attacker to elevate privileges. CVSS 7.8 (High), CWE-122. The attacker needs a local foothold with low privileges, so the risk is highest on terminal servers, shared PCs and systems where users run untrusted code. The flaw is not internet-facing.
Microsoft · Windows
A heap-based buffer overflow (CWE-122) in the Windows Media Foundation multimedia framework allows a local attacker to elevate privileges. Exploitation requires that the attacker already has a foothold on the system and that a user performs an action, for example by opening a malicious file. The CVSS base score is 7.8 (High), with high impact on confidentiality, integrity and availability.
Microsoft · Windows Media Foundation
