Kernel Vulnerability
The latest Kernel Vulnerability coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-50152: Windows Kernel Vulnerability Enables Local Privilege Escalation
Microsoft has disclosed a significant security vulnerability in the Windows kernel that could allow attackers to elevate privileges on affected systems. CVE-2025-50152 represents an out-of-bounds...
CVE-2025-55683: Critical Windows Kernel Vulnerability Threatens Multi-User Systems
Microsoft has issued an urgent security alert for CVE-2025-55683, a significant Windows Kernel information disclosure vulnerability that poses particular risks to multi-user systems and enterprise...
CVE-2025-55679: Critical Windows Kernel Information Disclosure Vulnerability
Microsoft has released an urgent security update addressing CVE-2025-55679, a high-priority Windows Kernel information disclosure vulnerability that enables local attackers to access sensitive system...
Patch now: Active exploits chain SharePoint RCE and auth bypass flaws (CVE-2023-29357, CVE-2023-24955).
Microsoft's SharePoint on-premises ecosystem is facing an unprecedented security crisis that demands immediate attention from IT administrators worldwide. A cluster of critical remote code execution...
BitLocker Kernel Flaw CVE-2025-54912 Lets Attackers Escalate to SYSTEM, Microsoft Urges Patching
Microsoft has confirmed a critical use-after-free vulnerability in the Windows BitLocker stack, tracked as CVE-2025-54912, that could allow an authorized local attacker to gain SYSTEM privileges on...
Microsoft Fixes High-Impact BitLocker Use-After-Free Vulnerability (CVE-2025-54911)
Microsoft has disclosed a high-severity use-after-free vulnerability in Windows BitLocker, tracked as CVE-2025-54911, that could allow a local attacker to elevate privileges from a standard user...
Microsoft's Brokering File System Hit by Race Condition—Attackers Can Seize SYSTEM
Microsoft has confirmed a local elevation-of-privilege vulnerability in its Brokering File System that hands a low-privileged local user a pathway to full SYSTEM control. Tracked as CVE-2025-54105,...
Patch Now: Windows Graphics Kernel Race Condition (CVE-2025-55226) Puts Multi-User Systems at Kernel Compromise Risk
Microsoft has pushed out a security update to patch CVE-2025-55226, a high-severity race condition vulnerability in the Windows Graphics Kernel that enables an authenticated local attacker to execute...
Urgent: Windows Win32K GRFX Race Condition Exploitable for Kernel Code Execution – Patch Now
Microsoft has disclosed a dangerous race condition vulnerability in the Windows graphics subsystem’s Win32K component, tracked as CVE-2025-55228, that allows an authenticated local attacker to gain...
Microsoft Urges Immediate Patching for Windows Kernel Privilege-Escalation Flaw CVE-2025-54110
Microsoft has released a security update to patch a high-severity vulnerability in the Windows kernel, tracked as CVE-2025-54110, that allows a local attacker to escalate privileges to SYSTEM level....
CVE-2025-54099: Windows Winsock Driver Stack Overflow Threatens SYSTEM Access
A stack-based buffer overflow in the Windows Ancillary Function Driver for WinSock (afd.sys) can be exploited by local attackers to seize SYSTEM privileges, Microsoft disclosed in a security...
Patch Now: Microsoft's netbt.sys Kernel Flaw (CVE-2025-55230/47996) Grants Attackers Full Control
A local elevation-of-privilege flaw in the Windows MBT Transport driver—the kernel component behind NetBIOS over TCP/IP—can hand attackers full SYSTEM rights, and while Microsoft’s July 2025...