Privilege Escalation
The latest Privilege Escalation coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows Hyper-V Race Condition Flaw (CVE-2025-54092) Enables Attackers to Seize Host Control
Microsoft has disclosed a dangerous race condition vulnerability in Windows Hyper-V that could allow a local attacker to seize SYSTEM-level privileges on the host. Tracked as CVE-2025-54092, the flaw...
Microsoft Patches Type Confusion Flaw in Windows Defender Firewall That Risks System Compromise
Microsoft has released a security update to fix a critical elevation-of-privilege vulnerability in the Windows Defender Firewall Service that could allow an authenticated attacker to gain...
Critical Windows Graphics Race Condition (CVE-2025-53807) Hands Out SYSTEM Access—Urgent Patch Guide
A race condition in the Windows Graphics Component can hand authenticated attackers full SYSTEM privileges, Microsoft disclosed this week. The vulnerability, cataloged as CVE-2025-53807, lurks in the...
Critical Bluetooth Flaw CVE-2025-27490 Patched: Full System Compromise Possible via Airborne Attack
Microsoft’s April 2025 Patch Tuesday included a fix for a critical Bluetooth elevation-of-privilege vulnerability, CVE-2025-27490, that allows an attacker within Bluetooth range to escalate...
CVE-2025-53804: Windows Kernel Vulnerability Exposes Sensitive Data—Patch Now and Harden Defenses
Microsoft has confirmed a new information disclosure vulnerability in the Windows kernel, tracked as CVE-2025-53804, that allows a local attacker to extract sensitive data from protected kernel...
Patch Alert: Microsoft Flags High-Risk Graphics Privilege Escalation (CVE-2025-53800)
Microsoft’s latest security advisory addresses an elevation-of-privilege vulnerability in the Windows Graphics Component tracked as CVE-2025-53800. Published through the Security Update Guide, the...
Critical Local Privilege Escalation Bug in Windows DWM Fixed: Here’s What You Need to Know
Microsoft has patched a serious local privilege escalation vulnerability in the Windows Desktop Window Manager (DWM) Core Library, tracked as CVE-2025-53801, that could allow an attacker with a basic...
Microsoft Patches Windows Kernel Memory Leak (CVE-2025-53803) That Facilitates Privilege Escalation
Microsoft has released a security update to close a Windows kernel memory disclosure vulnerability that hands attackers a powerful reconnaissance tool for crafting more reliable exploits. Tracked as...
CVE-2025-49692: Azure Connected Machine Agent Vulnerability Demands Immediate Patching
Microsoft has released a security update to address a critical elevation-of-privilege vulnerability (CVE-2025-49692) in the Azure Connected Machine agent, the software component that enables Azure...
Microsoft AutoUpdate Vulnerability Lets Attackers Escalate to Root on macOS via Symlink Tricks
Microsoft has disclosed a fresh local elevation-of-privilege vulnerability in its Microsoft AutoUpdate (MAU) agent that allows an attacker with an existing foothold on a macOS machine to escalate to...
Azure Arc’s Critical Local Privilege Flaw Fixed, But CVE Muddle May Leave Systems Exposed
Microsoft has patched a high-severity local elevation-of-privilege vulnerability in Azure Arc, but confusion over the associated CVE identifier could cause dangerous patching delays, security...
CVE-2025-55236: Windows Graphics Kernel Race Condition Allows Attackers to Escalate to SYSTEM — Patch Now
Microsoft has published advisory CVE-2025-55236, a time-of-check/time-of-use (TOCTOU) race condition in the Windows Graphics Kernel that hands local, authenticated attackers a path to elevate...