Opinions, tips, and news orbiting Microsoft
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally. Continue reading CVE-2025-53803 Windows Kernel Memory Information Disclosure Vulnerability
Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54111 Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Graphics Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-55223 DirectX Graphics Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-54097 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-55232 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-53805 HTTP.sys Denial of Service Vulnerability
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability