Opinions, tips, and news orbiting Microsoft
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-53799 Windows Imaging Component Information Disclosure Vulnerability
Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53801 Microsoft DWM Core Library Elevation of Privilege Vulnerability
Improper link resolution before file access (‘link following’) in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-55317 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Access of resource using incompatible type (‘type confusion’) in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53810 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54900 Microsoft Excel Remote Code Execution Vulnerability
Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network. Continue reading CVE-2025-54101 Windows SMB Client Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54904 Microsoft Excel Remote Code Execution Vulnerability