Msrc
The latest Msrc coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Patches Critical DirectX Kernel Race Condition Exploit (CVE-2025-53135) Threatening Windows Systems
Microsoft has released a security update for a local privilege escalation vulnerability in the Windows DirectX Graphics Kernel, tracked as CVE-2025-53135. The flaw, residing in the dxgkrnl driver,...
CVE-2025-50177: Critical Use-After-Free Bug in Microsoft Message Queuing Could Allow Remote Code Execution
{ "title": "CVE-2025-50177: Critical Use-After-Free Bug in Microsoft Message Queuing Could Allow Remote Code Execution", "content": "Microsoft has dropped a bombshell on Windows administrators: a...
Microsoft Patches CVE-2025-50176: DirectX Kernel Type-Confusion Bug Allows SYSTEM Compromise
Microsoft has issued a critical security update for CVE-2025-50176, a type-confusion vulnerability in the DirectX Graphics Kernel (dxgkrnl) that allows an authenticated attacker to execute arbitrary...
Microsoft Patches Windows Installer Flaw Allowing SYSTEM-Level Elevation
Microsoft has fixed a high-impact elevation-of-privilege vulnerability in Windows Installer that could allow a locally authorized attacker to gain SYSTEM-level privileges on unpatched systems....
Microsoft Warns of DirectX Kernel DoS Flaw That Can Crash Hosts Through Unchecked Graphics Allocations
Microsoft has issued a security advisory for CVE-2025-50172, a vulnerability in the DirectX Graphics Kernel that allows an authenticated attacker to exhaust system resources and cause a...
CVE-2025-50171: Critical RDP Flaw Allows Spoofing—Patch Now, Warns Microsoft
Microsoft has published details of a new vulnerability in its Remote Desktop Services that could allow an unauthenticated attacker to perform spoofing attacks over a network. Tracked as...
Urgent Fix: Hyper-V Race Condition CVE-2025-50167 Lets Attackers Seize Host Control
Microsoft has confirmed a dangerous race condition in Windows Hyper-V that gives an attacker with low-level access a path to full host compromise, escalating privileges to the kernel level. Tagged...
MSDTC Integer Overflow Opens Door to Memory Leak—Patch Now, Microsoft Warns
Microsoft has quietly disclosed a new integer overflow vulnerability in the Windows Distributed Transaction Coordinator (MSDTC) that lets attackers siphon sensitive memory contents over the network....
Microsoft Discloses Critical RRAS Heap Overflow (CVE-2025-50164) — Patch Now to Block Remote Code Execution
Microsoft has issued a high-severity security advisory for a heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) that could allow unauthenticated attackers to execute...
Urgent Patch for CVE-2025-50161: Win32K GRFX Heap Overflow Enables SYSTEM Escalation
Microsoft's latest security advisory warns of a heap-based buffer overflow in the Win32K GRFX subsystem that could allow an authenticated local attacker to escalate privileges to SYSTEM. Identified...
Microsoft Patches Critical Use-After-Free in Windows PPP EAP‑TLS, Enabling Local Privilege Escalation
Microsoft has issued a security advisory for CVE‑2025‑50159, a use‑after‑free vulnerability in the Remote Access Point‑to‑Point Protocol (PPP) EAP‑TLS implementation that can allow an...
Patch Now: CVE-2025-49761 Windows Kernel UAF Flaw Enables SYSTEM Takeover
A newly disclosed use-after-free vulnerability in the Windows kernel, tracked as CVE-2025-49761, hands a reliable privilege escalation path to any attacker who already has a toehold on a target...