kernel vulnerability

Microsoft has added CVE-2025-59192 to its October security rollup: a buffer over‑read in the Storport.sys Windows storage driver that Microsoft says can be abused by a locally authorized attacker to gain elevated privileges, and administrators should treat the published update as an urgent...

A newly recorded Windows kernel vulnerability, tracked as CVE-2025-55696, is a time‑of‑check/time‑of‑use (TOCTOU) race in the NtQueryInformationToken implementation (ntifs.h) that can allow a local attacker to elevate privileges to SYSTEM when exploited; Microsoft has published the entry in its...

Microsoft has recorded an elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver (cldflt.sys) that permits a local actor to obtain sensitive kernel-level information and, in some attack chains, progress to SYSTEM privileges—an urgent issue for shared desktops, VDI...

Microsoft’s advisory for CVE-2025-50152 documents an out‑of‑bounds read in the Windows kernel that may allow an authorized local attacker to elevate privileges to SYSTEM; independent vulnerability trackers list the flaw with a CVSS v3.1 base score of 7.8 (High) and, until vendor KB mappings are...

Microsoft has recorded CVE-2025-55683 as a Windows Kernel information‑disclosure vulnerability and released security updates; administrators should treat this as a priority patch for any hosts that allow untrusted local code or multi‑user access. Background / Overview Microsoft’s public entry...

Microsoft has published an advisory and a security update for CVE-2025-55679, a Windows Kernel information‑disclosure vulnerability that permits a local actor to obtain sensitive system memory under certain conditions — and administrators should treat it as a high-priority remediation for...

Microsoft’s SharePoint on‑premises ecosystem is at the center of a high‑urgency security crisis: a cluster of remote code execution (RCE) and authentication‑bypass issues — widely tracked under CVE identifiers such as CVE‑2025‑49704, CVE‑2025‑49706 and the emergent “ToolShell” chain...

Microsoft’s security advisory confirms a use‑after‑free defect in the BitLocker stack that can be triggered by an authorized local user to escalate privileges on affected Windows systems — administrators must treat CVE‑2025‑54912 as an urgent patching priority and assume a high‑impact threat...

CVE-2025-55226 is a locally exploitable race‑condition vulnerability in the Windows Graphics Kernel that allows an authenticated (local) attacker to achieve code execution in kernel context by inducing concurrent access to a shared graphics subsystem resource without proper synchronization. This...

Microsoft’s advisory identifies a vulnerability in the Windows Ancillary Function Driver for WinSock (afd.sys) that can be triggered locally to escalate privileges — described on the vendor page as a buffer overflow in the WinSock ancillary driver — and administrators must treat this as a...

Microsoft’s security update guide lists a high‑risk elevation‑of‑privilege entry for the Windows MBT Transport driver that, according to the vendor advisory, stems from an untrusted pointer dereference and can be used by an authorized local user to escalate to SYSTEM — a kernel‑level impact that...

Microsoft’s Security Response Guide flags a null-pointer dereference in the Windows Ancillary Function Driver for WinSock (AFD.sys) that, when reached by a local, authorized user, can be weaponized into an elevation‑of‑privilege to SYSTEM — a high‑impact kernel vulnerability that demands...

A use‑after‑free vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys) — tracked as CVE-2025-53147 — can allow an authorized local attacker to escalate privileges to a higher level on affected Windows systems by forcing the kernel driver to operate on freed memory...

Microsoft’s advisory confirms that a null pointer dereference in the Windows Ancillary Function Driver for WinSock (AFD.sys) can be triggered by a locally authorized attacker to elevate privileges to SYSTEM, creating a high-impact local elevation-of-privilege (EoP) risk for affected Windows...

Below is a comprehensive technical brief on CVE-2025-53135 (DirectX Graphics Kernel — elevation of privilege via a race condition). I searched Microsoft’s Security Update Guide and the public vulnerability databases for corroborating information; where vendor-provided details are available I...

A recently published Microsoft advisory warns that CVE-2025-49762 — a race-condition flaw in the Windows Ancillary Function Driver for WinSock (AFD.sys) — can allow a locally authorized attacker to elevate privileges by exploiting concurrent execution using a shared resource with improper...

A use‑after‑free bug in the Windows kernel has been reported under the identifier CVE‑2025‑49761 and is described by Microsoft as an elevation‑of‑privilege vulnerability that can allow a local, authorized attacker to gain SYSTEM privileges; administrators should treat the advisory as urgent and...

A critical security vulnerability, identified as CVE-2025-49666, has been discovered in the Windows Kernel, specifically affecting the Setup and Boot Event Collection components. This flaw is a heap-based buffer overflow that allows an authorized attacker to execute arbitrary code over a...

Here is a summary of CVE-2025-48809 based on your prompt and the official Microsoft Security Response Center: CVE-2025-48809 – Windows Secure Kernel Mode Information Disclosure Vulnerability Description: This vulnerability involves the removal or modification of processor optimization or...

The Windows Transport Driver Interface (TDI) Translation Driver, known as TDX.sys, has been identified with a critical vulnerability labeled CVE-2025-49658. This flaw permits authorized local attackers to perform out-of-bounds read operations, potentially leading to the disclosure of sensitive...