CVE-2025-55320

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2025-55248

Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network...

CVE-2025-55240

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-55240

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-53768

Use after free in Xbox allows an authorized attacker to elevate privileges locally...

CVE-2025-53150

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-53768

Use after free in Xbox allows an authorized attacker to elevate privileges locally...

CVE-2025-50174

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

CVE-2025-53150

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-49708

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...

CVE-2025-50152

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-47979

Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally...

CVE-2025-48813

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...

CVE-2025-49708

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...

CVE-2025-50152

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-47979

Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally...

EUVD-2025-34367

Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally...

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

Windows Speech Runtime Elevation of Privilege Vulnerability

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...