Siem
The latest Siem coverage — news, analysis, and updates from the WindowsNews.AI desk.
Actively Exploited Windows AFD.sys Flaw Earns CISA KEV Status Amid Patching Confusion
Microsoft’s February 2025 Patch Tuesday delivered a fix for CVE-2025-21418, a heap-based buffer overflow in the Windows Ancillary Function Driver (afd.sys), but sysadmins are grappling with a...
Patch Now: Critical Windows PrintWorkflowUserSvc Flaws Allow Attackers to Gain SYSTEM Privileges
Microsoft's December 2024 Patch Tuesday included a fix for CVE-2024-49095, a high-severity elevation of privilege vulnerability in the Windows PrintWorkflowUserSvc service that could give attackers...
Microsoft Patches Windows Installer Flaw Allowing SYSTEM-Level Elevation
Microsoft has fixed a high-impact elevation-of-privilege vulnerability in Windows Installer that could allow a locally authorized attacker to gain SYSTEM-level privileges on unpatched systems....
Windows SMB Bug CVE-2025-50169 Opens Door to Remote Code Execution — Patch Now
Microsoft’s June 2025 Patch Tuesday included a fix for a race-condition vulnerability in the Windows Server Message Block (SMB) protocol that can be exploited over the network to run malicious code...
MSDTC Integer Overflow Opens Door to Memory Leak—Patch Now, Microsoft Warns
Microsoft has quietly disclosed a new integer overflow vulnerability in the Windows Distributed Transaction Coordinator (MSDTC) that lets attackers siphon sensitive memory contents over the network....
Microsoft Patches Critical RRAS Heap Overflow CVE-2025-50160 That Exposes VPN Servers to Remote Takeover
Microsoft has released a patch for a critical heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) tracked as CVE-2025-50160, which allows attackers to remotely execute code...
Microsoft Patches Windows RRAS Bug That Leaks Confidential Data Over the Network
Microsoft has released a security update to address a serious information disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS) that could allow attackers to extract...
Critical Race Condition in Windows Graphics Lets Attackers Escalate to SYSTEM – What to Do
Microsoft has disclosed a critical elevation-of-privilege vulnerability in the Windows Graphics Component, tracked as CVE-2025-49743, that could allow attackers to gain SYSTEM-level access on a...
Microsoft Drops Limited Details on CVE-2025-25006 Exchange Spoofing Bug—Here’s How to Protect Your Network
Microsoft has posted a new Exchange Server vulnerability, CVE-2025-25006, with a terse description that points to a spoofing weakness in how the mail server handles special header elements. The...
Microsoft Discloses Critical PowerPoint Use-After-Free Flaw, CVE-2025-53761, Enabling Local Code Execution
Microsoft has issued a security advisory for a new use-after-free vulnerability in PowerPoint, tracked as CVE-2025-53761, that allows an unauthorized attacker to execute code locally. The flaw, which...
CVE-2025-53741: Microsoft Issues Emergency Excel Patch to Stop Remote Code Execution via Heap Overflow
Microsoft has disclosed a critical heap-based buffer overflow vulnerability in Excel, tracked as CVE-2025-53741, that can give attackers the ability to remotely execute code on a vulnerable machine...
Immediate Patch Needed: CVE-2025-49758 SQL Injection Allows SQL Server Privilege Escalation
Microsoft has released critical security updates for all supported versions of SQL Server to address CVE-2025-49758, a severe SQL injection vulnerability that could allow an authenticated attacker to...