Type Vulnerability
Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.
Productwindows
Show
Density
…Loading feed…
Loading feed…
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorised attacker to escalate privileges locally.
Confirm whether Microsoft Windows Server is in your estate.
all High · vulnerabilities · exploited in the wild
Updated
Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.
Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. Known-exploited catalogue reports exploitation in the wild.
An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute…
Next step: Confirm whether Microsoft Windows Server is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Microsoft Windows contains a link following vulnerability that allows for privilege escalation CVE-2025-60710 is listed in known-exploited catalogue (exploitation in the wild) Authoritative…
Next step: Confirm whether Microsoft Windows is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
An attacker could exploit the vulnerability by constructing a specially crafted Web page. Known-exploited catalogue reports exploitation in the wild.
Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorised attacker to elevate privileges locally.
An attacker who successfully exploited this vulnerability could gain administrator privileges. Known-exploited catalogue reports exploitation in the wild.
Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorised attacker to escalate privileges locally. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Microsoft Windows Server is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
CVE-2023-36424 is confirmed as exploited in the wild (US known-exploited catalogue) Authoritative catalogues report active exploitation of this vulnerability.
Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Microsoft Windows Server is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
2026 Patch Tuesday fixes 1,413 flaws BetaNews Tracked as CVE-2026-80097, the flaw is described as an…Sofia Elizabella Wyciślik-Wilson · Oct 27 creator Instagram tests longform video…
2026 Patch Tuesday fixes 1,413 flaws BetaNews Tracked as CVE-2026-80097, the flaw is described as an…Sofia Elizabella Wyciślik-Wilson · Oct 27 creator Instagram tests longform video…
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update.
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031.
End of feed