Opinions, tips, and news orbiting Microsoft
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-59515 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Affected software updated with new package information. Continue reading CVE-2025-60726 Microsoft Excel Information Disclosure Vulnerability
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-47179 Configuration Manager Elevation of Privilege Vulnerability
Improper link resolution before file access (‘link following’) in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Continue reading CVE-2025-62452 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-62219 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally. Continue reading CVE-2025-60708 Storvsp.sys Driver Denial of Service Vulnerability