Microsoft disclosed CVE-2026-40408 on May 12, 2026, as an Important-rated Windows WAN ARP Driver elevation-of-privilege vulnerability that affects supported Windows client and server releases and allows a locally authenticated attacker to gain SYSTEM privileges after exploiting a use-after-free...
Microsoft’s advisory listing for CVE-2025-53142 describes a use‑after‑free flaw in the Microsoft Brokering File System that can allow an authenticated, local attacker to escalate privileges on an affected Windows host — a classic kernel‑level memory corruption that deserves immediate attention...