New vulnerabilities – clearly explained

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows DNS Server: Use after free allows remote code execution

A use-after-free flaw in the Windows Domain Name Service (DNS Server) component allows an unauthenticated attacker to execute code remotely over the network. The CVSS base score is 8.1 (High), but the attack complexity is rated High and CISA SSVC reports no known exploitation and no automation. The issue affects the DNS Server role on supported Windows Server versions and on Windows 10 1607 as listed in the CPE data; the DNS Server role is normally not installed on Windows 10 clients.

Microsoft · Windows DNS Server

Windows Bluetooth Port Driver: Remote code execution via adjacent network

A flaw (out-of-bounds read) in the Windows Bluetooth Port Driver allows an unauthorized attacker to execute code. The attacker must be within Bluetooth radio range (adjacent network) and the victim must perform a user action, so the flaw is not internet-exposed. The affected driver is present on Windows systems with the Bluetooth stack, even without a paired device.

Microsoft · Windows

Microsoft Graphics Component: Local privilege escalation via numeric truncation

A numeric truncation error in the Microsoft Graphics Component of Windows allows a locally authenticated attacker with a low-privilege account to elevate privileges. Successful exploitation can lead to high impact on confidentiality, integrity and availability of the affected system (CVSS 7.8, NVD). The attacker needs local access and an existing user session, so the risk is mainly a compromised user account or malware running as a standard user.

Microsoft · Windows

Microsoft Windows 10 21h2

Research and translation in progress – available shortly.

Windows 10 1809 Kernel: Heap-based buffer overflow enables privilege escalation

A heap-based buffer overflow in the Windows Kernel of Windows 10 version 1809 and Windows Server 2019 allows a local attacker to elevate privileges. The attacker needs an existing authorized, low-privilege account on the system. Successful exploitation can lead to full control of the system (SYSTEM rights).

Microsoft · Windows 10 1809

Microsoft Windows Server 2022

Research and translation in progress – available shortly.

Microsoft Windows: Use-after-free in Windows Audio Service enables privilege escalation

A use-after-free vulnerability (CWE-416) in the Windows Audio Service allows a local attacker to elevate privileges. An attacker needs a valid low-privilege user session on the affected system, and attack complexity is high. Successful exploitation can lead to full control of the system, so the flaw is typically used after an initial compromise.

Microsoft · Windows 11

Windows Win32k: Heap-based buffer overflow allows local privilege escalation

A heap-based buffer overflow in the Win32k kernel subsystem of Windows allows an authorized local attacker to elevate privileges. An attacker needs an existing low-privilege foothold on the system, for example through a phished user, malware or a stolen account. The vulnerability is not directly reachable from the internet, but it can be used after a compromise to gain administrative rights.

Microsoft · Windows

Microsoft Windows 11 24h2

Research and translation in progress – available shortly.

Microsoft Windows 11: Elevation of privilege via use-after-free in Windows Search

A use-after-free flaw in the Microsoft Windows Search Component allows an authorized local attacker to elevate privileges. Exploitation requires local access with low privileges and a high-complexity condition. The flaw is not remotely exploitable on its own, but it can be used after an initial foothold, for example by malware or a low-privileged user on a shared system.

Microsoft · Windows 11

Windows 11: Heap-based buffer overflow in Windows Kernel (privilege escalation)

A heap-based buffer overflow in the Windows kernel allows a local attacker with low privileges to elevate their rights to system level. Exploitation requires an existing local foothold, such as a logged-in user account or malware already running on the device, and the vulnerability is not reachable from the internet by itself. Microsoft rates the impact as high for confidentiality, integrity and availability.

Microsoft · Windows 11

Windows Client for NFS: Local privilege escalation via integer overflow

An integer overflow or wraparound in the Windows Client for NFS component of Microsoft Windows allows an authorized local attacker to elevate privileges. An attacker who already has a user account on the system can gain higher privileges, with high impact on confidentiality, integrity and availability. The flaw is not remotely exploitable, and exposure depends on whether the Windows Client for NFS feature is installed.

Microsoft · Windows Client for NFS

Windows Spaceport.sys: Heap-based buffer overflow allows local code execution

A heap-based buffer overflow in the Windows Spaceport.sys kernel driver affects supported Windows 10, Windows 11 and Windows Server systems. An authorized local attacker with low privileges can execute code, which could lead to full system compromise (CVSS 3.1: 7.8). The attack is not remotely exploitable, so the main risk is a user or service account already on a machine gaining code execution, for example after phishing or a credential compromise.

Microsoft · Windows

Microsoft Windows Kernel: Privilege escalation via untrusted pointer dereference

The Windows kernel contains an untrusted pointer dereference (CWE-822) that can be triggered over the network. According to the official CVE record, an unauthenticated attacker can use it to elevate privileges. Attack complexity is high and no user interaction is needed. Third-party researchers describe the flaw differently (a denial of service in the DFS path), and this conflict is not yet resolved, so verify against MSRC.

Microsoft · Windows

Microsoft PostScript Printer Driver: Elevation of privilege (stack overflow)

A stack-based buffer overflow (CWE-121) in the Microsoft PostScript Printer Driver allows a local attacker to elevate privileges. The attacker needs local access and a user interaction, but no prior privileges. The driver is not internet-facing, so the main risk is an attacker or malware already running as a standard user, for example after phishing.

Microsoft · PostScript Printer Driver

Windows PostScript Printer Driver: Heap-based buffer overflow

The Microsoft PostScript Printer Driver in Windows contains a heap-based buffer overflow (CWE-122). A local user or malware already running on the system can exploit it to gain higher privileges. According to the CVSS vector, user interaction is required and the attacker needs a local foothold first; the CNA record lists many Windows 10, 11 and Server versions as affected, while the CPE data lists only Windows 10 1607.

Microsoft · Windows

Microsoft Windows Win32k: Heap-based buffer overflow allows local privilege escalation

A heap-based buffer overflow in the Windows Win32k kernel subsystem allows an attacker who already has a valid low-privilege account to elevate privileges on the local system. The attack requires no user interaction, and successful exploitation would give the attacker full control over confidentiality, integrity and availability of the system. The CVE is relevant mainly as a second stage after initial access, such as through a compromised account or phishing malware.

Microsoft · Windows 10 Version 1607

Microsoft Windows Kernel: Heap-based buffer overflow allows local privilege escalation

A heap-based buffer overflow in the Windows Kernel allows an attacker with a valid low-privileged local account to elevate privileges to SYSTEM. Exploitation requires local logon and no user interaction, so the flaw is not directly reachable from the internet. Once SYSTEM rights are gained, the attacker can fully compromise the host.

Microsoft · Windows 10 Version 1607

Microsoft Windows 10: Local privilege escalation in Win32k kernel subsystem

An untrusted pointer dereference in the Win32k kernel subsystem of Windows allows an authorized local attacker with low privileges to elevate privileges to SYSTEM (CWE-822). The attacker needs an existing local foothold, such as a low-privilege account or a compromised user session. The flaw is not directly reachable from the internet. Microsoft released a fix on 13 October 2026.

Microsoft · Windows 10

Microsoft Windows Error Reporting: Elevation of privilege via heap-based buffer overflow

A heap-based buffer overflow in the Windows Error Reporting component allows a locally authorized user to elevate privileges. An attacker who already has a logged-on account, for example through phishing or stolen credentials, could gain SYSTEM rights on the affected host. The vulnerability is not remotely exploitable and requires local access with low privileges.

Microsoft · Windows Error Reporting

Windows: Use-after-free in Spaceport.sys allows local privilege escalation

A use-after-free vulnerability in the Windows kernel-mode driver Spaceport.sys allows an authorized local user to elevate privileges. An attacker needs valid low-privilege access to the system and no user interaction is required. Successful exploitation could grant SYSTEM rights, which is most relevant on shared, multi-user and remote-session systems.

Microsoft · Windows

Microsoft Windows 11 24h2

Research and translation in progress – available shortly.

Windows Rich Text Edit Control: Heap-based buffer overflow leads to code execution

A heap-based buffer overflow in the Windows Rich Text Edit Control allows an unauthenticated attacker to execute code over the network. The CVSS base score is 9.8 (critical) because no privileges or user interaction are required. Microsoft rates the severity as Important and reports no known exploitation at publication. The delivery method (for example a crafted document or web content) is not stated in the sources.

Microsoft · Windows Rich Text Edit Control

Microsoft Windows iSCSI: Heap-based buffer overflow allows remote code execution

A heap-based buffer overflow in the Windows iSCSI component allows an unauthorized attacker to execute code over the network. Exploitation requires high complexity and user interaction. The public record does not state whether the flaw lies in the iSCSI Initiator or a Target component. The main risk is for systems that use iSCSI, especially storage servers, Hyper-V and cluster nodes.

Microsoft · Windows iSCSI