Vulnerabilities
Local attackers can elevate privileges via Windows SmartScreen memory flaw
A use-after-free error in Windows SmartScreen allows authenticated users with low rights to gain medium integrity access on affected systems.
Windows
Everything Malware Brief has reported about Windows: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Skyeye TTS Vulnerability Enables Unauth PowerShell Execution on Windows Servers
A critical unauthenticated command injection in Dromara Skyeye allows remote attackers to execute PowerShell code on Windows servers via a text-to-speech endpoint.