A heap-based buffer overflow in the Windows Rich Text Edit Control allows a locally authorized user with low privileges to elevate privileges on the affected system. Successful exploitation can lead to code execution with higher privileges. The attacker needs local access and an existing foothold, such as a logged-in user or malware running as a user, so the risk is not direct internet exposure.
Microsoft · Windows 10 1607
A heap-based buffer overflow in the Microsoft PostScript Printer Driver in Windows allows a local attacker to elevate privileges. The attack requires local access to the system and user interaction (UI:R). The CVSS score is 7.8 (High), with total impact rated for confidentiality, integrity and availability. At the time of writing, no exploitation and no public proof of concept are known.
Microsoft · Windows
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows Graphics Device Interface (GDI) allows an unauthenticated remote attacker to execute code. Exploitation requires that a user interacts with a crafted file or content, the exact trigger is not described in the sources. Successful exploitation would give the attacker full control over the affected system, as the CVSS impact is high for confidentiality, integrity and availability.
Microsoft · Windows GDI
Research and translation in progress – available shortly.
A use-after-free vulnerability (CWE-416) in the Microsoft Windows Search Component allows an authorized local user to elevate privileges. The attack requires local access with low privileges and a high attack complexity. Successful exploitation would give an attacker full control over confidentiality, integrity and availability of the affected system.
Microsoft · Windows Search Component
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A flaw in the DNS server component of Windows Server allows an unauthenticated attacker on the network to crash the DNS service. The service stays down until the server is rebooted or patched, which can disrupt name resolution and, on domain controllers, Active Directory logons. Microsoft rates the impact as availability only (CVSS 3.1: 7.5, network, no privileges, no user interaction).
Microsoft · Windows Server
A flaw in the Windows DNS component allows an unauthenticated attacker on the network to cause a denial of service. The vulnerability is classified as CWE-841 (improper enforcement of behavioral workflow). A successful attack impairs name resolution and is limited to availability; confidentiality and integrity are not affected. The attack requires no privileges and no user interaction, so DNS servers reachable from untrusted networks are most at risk.
Microsoft · Windows DNS Server
Research and translation in progress – available shortly.
A use-after-free flaw in the Windows Win32k kernel subsystem allows an authorized local attacker to elevate privileges. The attacker needs local code execution or an authenticated local session, and the attack complexity is high. Successful exploitation would give full control over confidentiality, integrity and availability of the affected system.
Microsoft · Windows 11
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A stack-based buffer overflow in the Windows DHCP Server role allows an authorized attacker to execute code over the network. The NVD score is 8.8 (CVSS 3.1), with high impact on confidentiality, integrity and availability. Exploitation requires low privileges and network access to the DHCP service, so the risk is mainly on internal networks, especially flat ones.
Microsoft · Windows DHCP Server
A heap-based buffer overflow in the Windows Client-Side Caching (CSC) service allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 8.8 (High), with network access and no privileges required, but user interaction is needed. Microsoft's CISA SSVC assessment rates technical impact as total, while exploitation is rated none.
Microsoft · Windows
A use-after-free flaw (CWE-416) in the Win32k kernel subsystem of Windows allows an authorized local attacker to elevate privileges. The attacker needs a local foothold, such as a low-privileged user session or malware, and the attack complexity is high. A successful attack would give full control of the affected system.
Microsoft · Windows 10 1607
Microsoft Windows DHCP Server contains a use-after-free vulnerability (CWE-416) in the server-side DHCP component. An authorized local user can exploit it to elevate privileges. Exploitation requires local access and low privileges, and the attack complexity is high. The flaw is not reachable directly from the internet.
Microsoft · Windows DHCP Server
An integer underflow in the Windows Kerberos authentication component allows an attacker with a low-privilege local account to elevate privileges, potentially up to SYSTEM or domain-level control. The affected versions include Windows 10 1607, 1809, 21H2, 22H2, Windows 11 and Windows Server 2012 to 2016. The attack requires local access and no user interaction, and the vulnerability is not directly reachable from the internet.
Microsoft · Windows
Research and translation in progress – available shortly.
Microsoft's October 2026 update fixes a double free (CWE-415) in the Windows libarchive component. According to the CVE record, an unauthenticated attacker on the network can execute code without user interaction, but attack complexity is high. Microsoft rates the flaw CVSS 8.1 and lists affected builds for Windows 10, Windows 11 and Windows Server. No exploitation and no public proof of concept have been found.
Microsoft · Windows
A heap-based buffer overflow in the Win32k kernel subsystem of Windows 10 Version 1607 and Windows Server 2016 allows an authorized local user to elevate privileges. Exploitation requires local access and low privileges, such as a user account or malware already running on the device. The flaw is not reachable over the network. Microsoft rates exploitation as more likely, but no public exploit code or active exploitation is confirmed.
Microsoft · Windows 10 1607
