Vulnerability Scoring

Microsoft's CVSS AV:L vs Remote Code Execution: Why Local Attack Vectors Still Enable Remote Exploitation

Microsoft's recent security bulletins reveal a confusing pattern: vulnerabilities labeled as "Remote Code Execution" (RCE) with CVSS attack vector ratings of AV:L (Local). This apparent contradiction...