An "authorized attacker" could exploit this weakness to gain elevated privileges, potentially reaching SYSTEM-level access.

China-linked hackers exploited multiple CVEs in April 2025 to target global entities with advanced persistence.

There are currently no details on how the security defect is being exploited and what's the scale of such efforts. According to data from the Shadowserver Foundation, more than 54,300 Firebox ...

Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors ...