A use-after-free memory‑corruption flaw in the Windows Connected Devices Platform Service (CDPSvc) has been publicly recorded as an elevation‑of‑privilege vulnerability that can allow a local, authorized attacker to gain SYSTEM privileges on affected hosts — administrators must treat CDPSvc...
A heap‑based buffer overflow in Windows Hyper‑V allows a locally authorized attacker to elevate privileges on an affected host — administrators must treat this as a high‑priority patching and hardening task and verify vendor guidance before rolling changes into production.
Background
Windows...
A use‑after‑free bug in the Windows kernel has been reported under the identifier CVE‑2025‑49761 and is described by Microsoft as an elevation‑of‑privilege vulnerability that can allow a local, authorized attacker to gain SYSTEM privileges; administrators should treat the advisory as urgent and...