A heap-based buffer overflow in the Windows Media Foundation component allows an unauthenticated remote attacker to execute code. Exploitation requires that a user opens or processes a crafted media file, which could arrive by email, download or file share. Windows 10 1809 is affected, along with other Windows 10 and 11 versions and Windows Server 2019, 2022 and 2025. CVSS 8.8 (High) per NVD; Microsoft rates it Critical, and no exploitation is known.
Microsoft · Windows Media Foundation
A command injection flaw in the Windows Shell allows an unauthorized remote attacker to bypass a security feature. The affected feature is Mark of the Web, which marks files from outside the local network. Microsoft reports active exploitation, and CISA has added the flaw to its Known Exploited Vulnerabilities catalog. No authentication is needed, but a user must interact, for example by opening a crafted file received by email or instant message.
Microsoft · Windows Shell
A use-after-free flaw (CWE-416) in the Windows Universal Disk Format File System Driver (UDFS) of Windows 10 Version 1607 allows an authorized local user to elevate privileges. An attacker needs a local account or code already running on the machine; no user interaction is required. Microsoft rates the flaw High (CVSS 7.8), and CISA SSVC lists no known exploitation.
Microsoft · Windows 10 Version 1607
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free flaw (CWE-416) in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized local attacker to elevate privileges. The attacker needs a valid local account and must be able to mount or interact with UDF volumes. Successful exploitation could lead to full compromise of the affected host, which is most relevant on shared workstations, terminal servers and file servers.
Microsoft · Windows UDFS driver
A use-after-free flaw (CWE-416) in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized local attacker to elevate privileges. The attacker needs local access with low privileges, and no user interaction is required. Successful exploitation gives high impact on confidentiality, integrity and availability (CVSS 7.8).
Microsoft · Windows 10 1607
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A integer overflow or wraparound in the Windows Raw Image Extension component allows an unauthenticated remote attacker to execute code. Exploitation requires a user to open or render a crafted RAW image file, for example from an email attachment, download or shared folder. The official CVSS score is 8.8 (High), with total impact on confidentiality, integrity and availability.
Microsoft · Raw Image Extension
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Microsoft has fixed a use-after-free vulnerability (CWE-416) in the Windows DHCP Server role. An unauthenticated attacker with network access can execute code on the server, and the CVSS score is 9.8 (critical). Microsoft rates exploitation as less likely and lists no public disclosure, but DHCP servers reachable from internal segments should be patched as a priority.
Microsoft · Windows DHCP Server
The Windows COM+ Event System Service is affected in several Windows 10, Windows 11 and Windows Server versions. An authenticated local user with a low-privileged account can trigger an untrusted pointer dereference and elevate privileges locally. Remote exploitation is not possible according to the CVE record (local attack vector), and CISA SSVC lists exploitation as none. CVSS 3.1 base score is 7.8 (High).
Microsoft · Windows
Research and translation in progress – available shortly.
The Windows NTFS file system driver in Windows 10 Version 1607 and Windows Server 2016 (and other listed Windows versions) contains an untrusted pointer dereference. An attacker with local access and low privileges can elevate privileges to SYSTEM, which gives full control over the affected machine. Exploitation requires a foothold on the machine, for example through a compromised user account or malware; the flaw is not reachable from the internet.
Microsoft · Windows 10 Version 1607
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows Kernel allows an authorized local attacker to elevate privileges. The CVE record lists Windows 10, Windows 11, Windows Server 2012, 2012 R2 and 2016 as affected, and the CPE data also names Windows Server 2022. An attacker needs a local, low-privilege account, so the risk is mainly as a second step after another compromise, such as a stolen password. Successful exploitation would give full control of the affected system.
Microsoft · Windows Kernel
A flaw in the Windows NTFS file system driver allows an authorized local attacker to elevate privileges, according to Microsoft's CNA record. An attacker needs a valid low-privileged local account and no user interaction is required. Successful exploitation would give the attacker full control (SYSTEM level) on the affected host. Microsoft rates exploitation as unlikely, and no in-the-wild use or public proof of concept is known.
Microsoft · Windows NTFS
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
An untrusted pointer dereference in the Windows Object Linking and Embedding (OLE) infrastructure allows an unauthorized attacker to execute arbitrary code over the network. No privileges or user interaction are required according to the CVSS vector, and the impact on confidentiality, integrity and availability is rated high. Multiple supported Windows 10, Windows 11 and Windows Server releases are listed as affected, although the NVD CPE lists only Windows 10 1607.
Microsoft · Windows
