Kernel Vulnerability
The latest Kernel Vulnerability coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows 11's Security Stack Is Strong, But Phishing and Zero-Day Gaps Demand More From Users
Windows 11 ships with a fortress of built-in security features, but attackers increasingly slip past them by targeting the human element. Microsoft Defender Antivirus, SmartScreen reputation checks,...
CVE-2025-53723: Hyper‑V Truncation Bug Hands Local Attackers SYSTEM Control
Microsoft has published an advisory for a new elevation‑of‑privilege vulnerability in Windows Hyper‑V that could allow an authorized attacker on an affected host to escalate privileges and take...
Critical Windows AFD.sys Kernel Flaw (CVE-2025-53718) Exposes Systems to Local Privilege Escalation
Microsoft has issued a high-priority security advisory for a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys). Tracked as CVE-2025-53718, the flaw allows a...
Actively Exploited AFD.sys Vulnerability Grants Attackers SYSTEM Access: Patch Now
Microsoft has patched a dangerous vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys) that attackers are actively exploiting in the wild to gain complete control over...
Heap Overflow in Windows ks.sys Driver Opens Door to Full System Compromise – Patch Immediately
A newly disclosed heap-based buffer overflow in the Windows Kernel Streaming (ks.sys) driver enables any locally authenticated attacker to escalate privileges to SYSTEM, granting full control over...
New AFD.sys Use-After-Free (CVE-2025-53147) Demands Immediate Patching as Kernel Exploit Chains Resurface
A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys) tracked as CVE-2025-53147 allows a local attacker to escalate privileges to SYSTEM, Microsoft disclosed...
CVE-2025-53141: Microsoft Fixes AFD.sys Null Pointer Bug Enabling Local SYSTEM Escalation
{ "title": "CVE-2025-53141: Microsoft Fixes AFD.sys Null Pointer Bug Enabling Local SYSTEM Escalation", "content": "Microsoft has released a security patch for a high‑severity privilege...
CVE-2025-53137: Microsoft’s AFD.sys Patch Stops Local Attackers from Hijacking SYSTEM
A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys), tracked as CVE-2025-53137, hands any local attacker with a toehold on a machine a direct path to SYSTEM...
Actively Exploited Windows AFD.sys Flaw Earns CISA KEV Status Amid Patching Confusion
Microsoft’s February 2025 Patch Tuesday delivered a fix for CVE-2025-21418, a heap-based buffer overflow in the Windows Ancillary Function Driver (afd.sys), but sysadmins are grappling with a...
Microsoft Patches Critical DirectX Kernel Race Condition Exploit (CVE-2025-53135) Threatening Windows Systems
Microsoft has released a security update for a local privilege escalation vulnerability in the Windows DirectX Graphics Kernel, tracked as CVE-2025-53135. The flaw, residing in the dxgkrnl driver,...
New Win32k GRFX Race Condition Lets Attackers Hijack Windows Systems — Patch Now
A race-condition vulnerability in the Windows Win32k GRFX kernel component, assigned CVE-2025-53132, enables local attackers to escalate privileges to SYSTEM and take full control of an unpatched...
Microsoft Patches CVE-2025-50176: DirectX Kernel Type-Confusion Bug Allows SYSTEM Compromise
Microsoft has issued a critical security update for CVE-2025-50176, a type-confusion vulnerability in the DirectX Graphics Kernel (dxgkrnl) that allows an authenticated attacker to execute arbitrary...