CVE-2025-54111 — Windows UI XAML Phone DatePickerFlyout: Use‑After‑Free Leads to Local Privilege Escalation
By [Your Name], WindowsForum.com — Sep 9, 2025
Summary
Microsoft has assigned CVE‑2025‑54111 to a use‑after‑free vulnerability in the Windows UI XAML Phone DatePickerFlyout control. The...
Microsoft's Security Response Center lists CVE-2025-50161 as a heap-based buffer overflow in the Win32K GRFX subsystem that allows an authorized local attacker to elevate privileges, and administrators should treat this as a high-priority patching item for all affected Windows hosts.
Background...