#elevation-of-privilege

[ follow ]
#microsoft-security-updates #office-vulnerabilities #kernel-code-execution #authentication-bypass
Information security
fromZero Day Initiative
23 hours ago

Zero Day Initiative - The May 2026 Security Update Review

Most Microsoft fixes address elevation of privilege, with several code execution paths requiring varying attacker access levels and one kernel issue enabling code execution via crafted NVMe-oF handshake messages.
Information security
fromComputerWeekly.com
5 months ago

Microsoft users warned over privilege elevation flaw | Computer Weekly

CVE-2025-62215 is a Windows Kernel elevation-of-privilege vulnerability exploitable in the wild via a race condition and double-free to gain SYSTEM.
fromThe Hacker News
6 months ago

Two New Windows Zero-Days Exploited in the Wild - One Affects Every Version Ever Shipped

Of the 183 vulnerabilities, eight of them are non-Microsoft issued CVEs. As many as 165 flaws have been rated as Important in severity, followed by 17 as Critical and one as Moderate. The vast majority of them relate to elevation of privilege vulnerabilities (84), with remote code execution (33), information disclosure (28), spoofing (14), denial-of-service (11), and security feature bypass (11) issues accounting for the rest of them.
Information security
[ Load more ]