Eop
The latest Eop coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-53723: Hyper‑V Truncation Bug Hands Local Attackers SYSTEM Control
Microsoft has published an advisory for a new elevation‑of‑privilege vulnerability in Windows Hyper‑V that could allow an authorized attacker on an affected host to escalate privileges and take...
CVE-2025-53141: Microsoft Fixes AFD.sys Null Pointer Bug Enabling Local SYSTEM Escalation
{ "title": "CVE-2025-53141: Microsoft Fixes AFD.sys Null Pointer Bug Enabling Local SYSTEM Escalation", "content": "Microsoft has released a security patch for a high‑severity privilege...
CVE-2025-53137: Microsoft’s AFD.sys Patch Stops Local Attackers from Hijacking SYSTEM
A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys), tracked as CVE-2025-53137, hands any local attacker with a toehold on a machine a direct path to SYSTEM...
Microsoft Patches Azure File Sync EoP Vulnerability CVE-2025-29973—What IT Admins Must Do Now
Microsoft has confirmed an elevation-of-privilege vulnerability in its Azure File Sync service that could allow an authenticated local attacker to gain full control of affected Windows servers....