Windows Security
The latest Windows Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-58739: Windows File Explorer Spoofing Vulnerability Exposes NTLM Credentials
Microsoft has disclosed a critical security vulnerability in Windows File Explorer that could allow attackers to spoof user interfaces and potentially expose NTLM credentials to unauthorized parties....
CVE-2025-58736: Critical Windows COM Memory Vulnerability Patched in October 2025 Update
Microsoft has addressed a critical security vulnerability in Windows COM objects that could allow attackers to escalate privileges on affected systems. CVE-2025-58736, patched in the October 2025...
CVE-2025-58729: Critical Windows LSM DoS Vulnerability - Patch Now
Microsoft has issued a critical security advisory for CVE-2025-58729, a newly discovered denial-of-service vulnerability in the Windows Local Session Manager (LSM) that could allow attackers to crash...
CVE-2025-58726: Critical Windows SMB Server Privilege Escalation Vulnerability Analysis
Microsoft has disclosed a significant security vulnerability in the Windows Server Message Block (SMB) protocol that could allow authenticated attackers to escalate privileges over network...
Patches released for CVE-2025-58714 AFD driver flaw granting attackers SYSTEM access
Microsoft has confirmed a serious elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock (afd.sys) that could allow attackers to gain SYSTEM-level privileges on...
CVE-2025-58714: Critical WinSock AFD Vulnerability Enables Local Privilege Escalation
Microsoft has issued an urgent security advisory for CVE-2025-58714, a critical elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock that enables attackers to...
Windows CDPSvc UAF Vulnerability CVE-2025-58727: Critical Patch Required
A critical use-after-free vulnerability in Windows' Connected Devices Platform Service (CDPSvc) has been identified as CVE-2025-58727, posing significant elevation-of-privilege risks for...
CVE-2025-58720: Critical Windows Cryptographic Services Vulnerability Explained
Microsoft has disclosed CVE-2025-58720, a significant information disclosure vulnerability affecting Windows Cryptographic Services that could allow attackers to access sensitive data from affected...
CVE-2025-58725: Critical Windows COM+ EoP Vulnerability Requires Immediate Patching
Microsoft has disclosed a critical elevation-of-privilege vulnerability in the Windows COM+ Event System, designated CVE-2025-58725, that could allow attackers to gain SYSTEM privileges on affected...
CVE-2025-55690: Critical PrintWorkflowUserSvc EoP Vulnerability Patched in Windows
Microsoft has addressed a critical elevation of privilege vulnerability in the Windows printing stack, designated CVE-2025-55690, affecting the PrintWorkflowUserSvc service. This memory-safety flaw...
Windows Kernel Race Condition Opens Door to System Takeover – Patch Now, Microsoft Says
Microsoft has confirmed a dangerous flaw in the Windows kernel that could let an attacker with minimal access take full control of a system, and the company is urging everyone to install the...
CVE-2025-55680: Critical Windows Cloud Files Driver Vulnerability Patched
Microsoft has addressed a critical elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver (cldflt.sys) that could allow attackers to gain SYSTEM-level privileges on...