Microsoft has published an advisory for CVE-2025-53801: an untrusted pointer dereference in the Windows Desktop Window Manager (DWM) Core Library that can be triggered by an authorized local user to elevate privileges on affected systems. The flaw resides in DWM’s memory handling and, when...
Microsoft’s Security Update Guide lists CVE‑2025‑53151 as a use‑after‑free vulnerability in the Windows kernel that can be abused by an authorized local user to elevate privileges on an affected system, and Microsoft’s published advisory directs administrators to install the supplied security...
Microsoft’s Security Response Center has published an advisory for CVE‑2025‑53140, a use‑after‑free vulnerability in the Windows Kernel Transaction Manager (KTM) that Microsoft says can be exploited by an authorized local attacker to elevate privileges on an affected system.
Background /...