Opinions, tips, and news orbiting Microsoft
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-50167 Windows Hyper-V Elevation of Privilege Vulnerability
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. Continue reading CVE-2025-53716 Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network. Continue reading CVE-2025-50166 Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53155 Windows Hyper-V Elevation of Privilege Vulnerability
Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-50165 Windows Graphics Component Remote Code Execution Vulnerability
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network. Continue reading CVE-2025-53153 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Continue reading CVE-2025-50164 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53151 Windows Kernel Elevation of Privilege Vulnerability