Blog.0Patch Micropatches Released for Windows Elevation of Privilege Vulnerabilities
Article Content
- •CVE-2025-60704 allows local network attackers to impersonate any domain user.
- •CVE-2026-20871 enables local unprivileged attackers to execute arbitrary code as System.
- •0patch provides micropatches for legacy Windows versions to mitigate these vulnerabilities.
Two critical vulnerabilities affecting Windows systems have been addressed with micropatches. CVE-2025-60704, a privilege escalation vulnerability in Kerberos, allows attackers on local networks to impersonate domain users. This flaw was reported by Eliran Partush and Dor Segal of Silverfort and was patched by Microsoft in November 2025. CVE-2026-20871, a local privilege escalation vulnerability in Desktop Window Manager, enables unprivileged attackers to execute arbitrary code as System. This vulnerability was reported through the Trend Zero Day Initiative and patched in January 2026. 0patch has released micropatches for legacy Windows versions to mitigate these issues. Both vulnerabilities can be exploited by local attackers, posing risks to systems that are no longer receiving official updates.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2025-60704 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…