Cybersecurity firm ESET discovered a Windows zero-day exploit that affects older systems like Windows 7 and Server 2008. Called CVE-2019-1132, it is a privilege escalation issue linked to how the ...

Microsoft is aware of both exploits, but doesn't see a threat. "[We are] not currently aware of active attacks utilizing the exploit code," Microsoft spokesperson Kjersti Gunderson said.

Although Microsoft has patched multiple DLL load hijacking vulnerabilities since last summer, Windows and Internet Explorer 9 (IE9) can still be exploited, a security company warned today. Microsoft ...

Threat actors have been observed exploiting a privilege escalation vulnerability on the Windows Backup and Restore service. "[...] CVE-2023-21752 is a vulnerability which allows a basic user to ...