Kernel Exploitation
The latest Kernel Exploitation coverage — news, analysis, and updates from the WindowsNews.AI desk.
Patch Now: Microsoft's netbt.sys Kernel Flaw (CVE-2025-55230/47996) Grants Attackers Full Control
A local elevation-of-privilege flaw in the Windows MBT Transport driver—the kernel component behind NetBIOS over TCP/IP—can hand attackers full SYSTEM rights, and while Microsoft’s July 2025...
Microsoft Rushes Patch for BFS Kernel Bug CVE-2025-53142 That Hands Attackers SYSTEM Access
Microsoft has issued a security advisory for CVE-2025-53142, a use-after-free vulnerability in the Windows Brokering File System (BFS) that allows an authenticated local attacker to escalate...
Patch Now: CVE-2025-53140 Kernel Transaction Manager Use-After-Free Enables Local Privilege Escalation on Windows
Microsoft has released a security update for CVE-2025-53140, a use-after-free vulnerability in the Windows Kernel Transaction Manager (KTM) that allows an authorized local attacker to elevate...
Immediate Patch Urged for Windows Cloud Files Driver Flaw (CVE-2025-50170) That Escalates to SYSTEM
Microsoft has released a security advisory for CVE-2025-50170, a local elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver (cldflt.sys) that could allow an attacker...
137 Fixes and a Win32K Type-Confusion Bug: Microsoft’s Mammoth July Patch Tuesday
Microsoft’s July 2025 security update is a behemoth, shipping patches for 137 vulnerabilities, including a zero-day in SQL Server and a heap of critical remote code execution flaws. But buried in...
Windows 11 KASLR Bypass Exploit: How eneio64.sys Driver Vulnerability Threatens Kernel Security
A critical vulnerability in the eneio64.sys driver has exposed Windows 11 systems to potential Kernel Address Space Layout Randomization (KASLR) bypass attacks, undermining a fundamental security...
Cache Timing Side-Channel Attacks Bypass Windows 11 KASLR: Unveiling Modern Exploitation Techniques
In recent developments, cache timing side-channel attacks have resurfaced as a significant concern in system security. A recent demonstration targeting fully patched Windows 11 installations has...
New CPU Cache Timing Attack Bypasses Windows 11 KASLR Security
The relentless arms race between cybersecurity defenses and exploit techniques has escalated to the microprocessor level, as researchers unveil a sophisticated CPU cache timing attack capable of...