mmcss vulnerability

  1. CVE-2025-60707: Patch MMCSS UAF Local Privilege Escalation in Windows

    Microsoft has published an advisory today for CVE-2025-60707, a use‑after‑free vulnerability in the Multimedia Class Scheduler Service (MMCSS) that can be abused by an authorized local attacker to gain elevated privileges on a Windows host; Microsoft has released security updates addressing the...