Neowin News Feed for: Lpe

Windows 11 KB5089549 can be planted with deadly Registry hack to take over your system

Sayan Sen — Mon, 18 May 2026 07:08:01 +0000

Windows 11 KB5089549 can still allow a dangerous Registry-based privilege escalation attack, potentially enabling attackers to fully compromise systems. Read more...

Microsoft, CISA warn on flaw affecting miilions of systems running major Linux distros

Sayan Sen — Sat, 02 May 2026 12:06:01 +0000

CISA and Microsoft have warned about a security vulnerability on Linux which can potentially impact millions of devices. Read more...

Hackers are selling a Windows exploit for $220,000 on the dark web

Ivan Jenic — Tue, 10 Mar 2026 01:32:01 +0000

A Windows exploit that grants system-level access to attackers is currently up for sale on the dark web for $220,000. Read more...

KB5035238: Microsoft released Group Policy security fix for oldest Windows 10 version

Sayan Sen — Sat, 10 Feb 2024 22:28:01 +0000

Microsoft released a security fix for a Group Policy-related vulnerability for the oldest Windows 10 version recently. The patch should be will be deployed via the RSAT Server tool. Read more...

AMD wants you to update to the latest Ryzen Master on Windows 11 and Windows 10

Sayan Sen — Wed, 15 Feb 2023 16:34:02 +0000

AMD has advised users to update Ryzen Master as it was vulnerable to a high severity flaw. This follows the earlier report today where the company's CPUs have begun exhibiting fTPM stutters on Linux. Read more...

Microsoft Defender, Avast, AVG turned against Windows to permanently delete files

Sayan Sen — Sun, 11 Dec 2022 18:36:01 +0000

Microsoft Defender, AVG, Avast, and more, were found vulnerable to a new zero-day security exploit through which harmless files, even system files, could be deleted using the anti-virus. Read more...

Microsoft Windows 11 fights back at Pwn2Own hackers on Day 2 but still lost some

Sayan Sen — Fri, 20 May 2022 17:48:01 +0000

On Day One of the annual Pwn2Own ethical hacking event, Microsoft's Windows 11 as well as Teams was successfully hacked every time. However, on Day Two, not every attempt ended up in success. Read more...

ESET found Lenovo IdeaPad, Legion and more laptops had vulnerable UEFI, security patches out

Sayan Sen — Tue, 19 Apr 2022 17:44:01 +0000

Several popular Lenovo consumer models, including IdeaPad, Legion, and more, have been found to be vulnerable to UEFI firmware security bugs. The vulnerabilities can lead to privilege of escalation. Read more...

After multiple Patch Tuesday fails, unofficial fix for an old Windows vulnerability released

Sayan Sen — Mon, 21 Mar 2022 19:52:01 +0000

An unofficial patch for a Windows LPE security vulnerability under "CVE-2021-34484" is out, one that was supposedly fixed by Microsoft via its Patch Tuesday updates twice, but apparently not. Read more...

Microsoft finally makes bypassing Defender scans harder by changing Exclusions permission

Sayan Sen — Fri, 11 Feb 2022 13:44:01 +0000

Microsoft has made changes to Windows Defender's Exclusions as the section is no longer visible to users who don't have administrator rights, whereas previously, it was visible to everyone. Read more...

ESET releases crucial product updates that fix security vulnerabilities for Windows AMSI

Sayan Sen — Wed, 02 Feb 2022 15:30:01 +0000

ESET has released updated builds for a whole bunch of its products on Windows. These updated product builds fix a local privilege escalation (LPE) vulnerability that the firm learned about last year. Read more...

Every major Linux distro has been vulnerable for the last 12 years due to Polkit pkexec flaw

Sayan Sen — Wed, 26 Jan 2022 05:26:01 +0000

An LPE security vulnerability under the ID CVE-2021-4034 was found by Linux security researchers at Qualys. The bug has been present for 12+ years and almost every major Linux distro is vulnerable. Read more...

Crucial BIOS update rolling out for Intel 11th Gen, 10th Gen, and more CPUs, fixes LPE bug

Sayan Sen — Fri, 12 Nov 2021 08:04:01 +0000

Intel has published an updated security advisory for a couple of new LPE bugs that were discovered. A lot of the newer CPUs, except Alder Lake, are vulnerable too. Firmware patches are rolling out. Read more...

Microsoft: Our PrintNightmare patch is effective, you're just using Windows wrong

Usama Jawad — Fri, 09 Jul 2021 04:56:01 +0000

Despite claims to the contrary, Microsoft says that its PrintNightmare patch works as intended. It states that security researchers who are calling it ineffective are using insecure configurations. Read more...

New Windows 10 zero-day gets published to Github by SandboxEscaper

Paul Hill — Wed, 22 May 2019 12:46:02 +0000

A new Windows 10 zero-day has surfaced on Github. The vulnerability, which Microsoft isn't believed to have been forewarned about, was released by SandboxEscaper who has previously released zero-days. Read more...