Endpoint Security
The latest Endpoint Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows Defender Firewall Type Confusion Bug Opens Door to SYSTEM-Level Compromise
A severe type confusion vulnerability in the Windows Defender Firewall service, tracked as CVE-2025-54109, could allow an attacker with a low-privilege local account to seize complete SYSTEM control...
Urgent Patch Alert: Windows VHD Bug CVE-2025-54112 Enables Full System Compromise
A single booby-trapped VHD file is all an attacker needs to jump from limited user to complete Windows server or workstation control. That’s the reality behind CVE-2025-54112, the latest...
Microsoft Patches Type Confusion Flaw in Windows Defender Firewall That Risks System Compromise
Microsoft has released a security update to fix a critical elevation-of-privilege vulnerability in the Windows Defender Firewall Service that could allow an authenticated attacker to gain...
Critical Windows Graphics Race Condition (CVE-2025-53807) Hands Out SYSTEM Access—Urgent Patch Guide
A race condition in the Windows Graphics Component can hand authenticated attackers full SYSTEM privileges, Microsoft disclosed this week. The vulnerability, cataloged as CVE-2025-53807, lurks in the...
CVE-2025-53804: Windows Kernel Vulnerability Exposes Sensitive Data—Patch Now and Harden Defenses
Microsoft has confirmed a new information disclosure vulnerability in the Windows kernel, tracked as CVE-2025-53804, that allows a local attacker to extract sensitive data from protected kernel...
Microsoft AutoUpdate Vulnerability Lets Attackers Escalate to Root on macOS via Symlink Tricks
Microsoft has disclosed a fresh local elevation-of-privilege vulnerability in its Microsoft AutoUpdate (MAU) agent that allows an attacker with an existing foothold on a macOS machine to escalate to...
Urgent Excel Security Fix: Use-After-Free Bug Opens Door to Code Execution — Mac LTSC Patches Delayed
Microsoft has issued a security advisory for CVE-2025-54903, a critical use-after-free vulnerability in Microsoft Excel that allows an attacker to execute code locally when a victim opens a...
CVE-2025-54902: Excel Out-of-Bounds Read Flaw Could Let Attackers Seize PCs—Mac Updates Still Missing
Microsoft has released a security update for a critical out-of-bounds read vulnerability in Excel that could allow remote code execution—but the patch is not yet available for Mac users. Tracked as...
Microsoft Warns of Actively Targeted Excel Use-After-Free Flaw CVE-2025-54896
Microsoft has issued a critical security advisory for CVE-2025-54896, a use-after-free vulnerability in Microsoft Office Excel that could allow attackers to execute arbitrary code on Windows...
Windows NEGOEX Integer Overflow Lets Attackers Escalate to SYSTEM—Patch Now
Microsoft has released a security update to plug a critical elevation-of-privilege hole in the Windows NEGOEX authentication mechanism. Tracked as CVE-2025-54895, the flaw stems from an integer...
Windows CDPSvc Elevation Flaw (CVE-2025-54102) Patched; Attackers Could Seize SYSTEM Control
A high-severity vulnerability in the Windows Connected Devices Platform Service (CDPSvc), cataloged as CVE-2025-54102, can be exploited by a low-privileged local attacker to gain NT AUTHORITY\SYSTEM...
New Outlook for Windows Takes Major Step Toward Classic Parity with Offline Attachments, Ctrl+F, and More
Microsoft has finally patched one of the most glaring holes in its web-savvy "new Outlook" for Windows: you can now open classic email attachments without an internet connection. The update also...