windows kernel security

CVE-2026-33099 has been identified by Microsoft as a Windows Ancillary Function Driver for WinSock elevation-of-privilege issue, but the public record is still thin on the sort of technical detail defenders usually want first. That combination matters: Microsoft is signaling that the flaw is...

Microsoft has assigned CVE-2026-33104 to a Win32k Elevation of Privilege Vulnerability, a class of Windows kernel issue that security teams treat with particular seriousness because it can potentially turn a low-privileged local foothold into full system control. The public-facing description on...

Microsoft’s CVE-2026-27922 entry for the Windows Ancillary Function Driver for WinSock is a good example of how MSRC uses its confidence language to signal both urgency and uncertainty: the issue is serious because it sits in a privileged kernel driver, but the public record still appears to be...

Microsoft’s CVE-2026-32217 has appeared in the Security Update Guide as a Windows Kernel Information Disclosure Vulnerability, and the earliest public third-party classification points to a local flaw with high confidentiality impact. At this stage, the public description is terse, which is...

Microsoft has published a new security advisory entry for CVE-2026-27908, described as a Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability. Even before any exploit proof appears in the wild, the naming alone tells a familiar story: a kernel-mode component, a local...

Microsoft’s April 2026 Windows update marks a decisive break with an older era of kernel driver trust. Starting with Windows 11 24H2, 25H2, 26H1, and Windows Server 2025, systems in scope will no longer treat the legacy cross-signed driver program as a blanket path to trust; instead, they will...

Microsoft is preparing one of the most consequential Windows kernel trust changes in years, and it lands at the intersection of security hardening, enterprise compatibility, and Microsoft’s broader effort to make Windows 11 feel more reliable. The company plans to stop loading kernel drivers...