CVE-2025-27728

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2025-15552 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Drivers affected versions not specified Description: The issue is an out-of-bounds read in Windows Kernel-Mode Drivers, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there i...

CVE-2025-27728: Out-of-bounds Read

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

CVE-2025-24066: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2025-10813 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Drivers affected versions not specified Description: A heap-based buffer overflow issue in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

Microsoft Windows Kernel-Mode Drivers Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Kernel-Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products an...

October 10, 2017—KB4041678 (Security-only update)

None None...

Microsoft Patch Tuesday - October 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 63 new vulnerabilities with 28 of them rated critical and 35 rated important. These vulnerabilities impact Graphic...

September 12, 2017—KB4038793 (Security-only update)

None None...

September 12, 2017—KB4038786 (Security-only update)

None None...

Microsoft Windows Monthly Rollup (KB4015549)

This host is missing a monthly rollup according to Microsoft security update KB4015549. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

March 2017 Security Monthly Quality Rollup for Windows Server 2012

March 2017 Security Monthly Quality Rollup for Windows Server 2012 Summary This security update resolves the following vulnerabilities in Windows Server 2012: MS17-022 Security update for Microsoft XML Core Services MS17-019 Security update for Active Directory Federation Services MS17-018 Securi...

MS16-135: Description of the security update for Windows kernel-mode drivers: November 8, 2016 (KB3194371)

None None...

MS16-106: Security Update for Microsoft Graphics Component (3185848)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in Windows kernel-mode drivers due to improper handling of objects in memory. An authenticated, remote attacker can exploit these,...

MS16-034: Description of the security update for Windows kernel-mode drivers: March 8, 2016

None None...

MS16-005: Description of the security update for Windows kernel-mode drivers: January 12, 2016 (KB3124000)

None None...

MS16-005: Description of the security update for Windows kernel-mode drivers: January 12, 2016 (KB3124001)

None None...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...

Microsoft January 2014 Patch Tuesday Security Updates

Microsoft is entering softly into 2014 with a minimalist version of Patch Tuesday, which is likely to be a welcome reprieve. Windows shops can expect a busy re-tooling year ahead as Microsoft not only ends support—including security updates—for Windows XP, but also will restrict the use of MD5 in...