6221 matches found
CVE-2025-47178
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network...
CVE-2025-47159
Protection mechanism failure in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2025-26636
Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2025-49744
CVE-2025-49744 — Microsoft Graphics Component heap-based buffer overflow can allow an authorized, local attacker to escalate privileges. Connected sources confirm this as an elevation-of-privilege vulnerability in the Microsoft Graphics Component (a graphics driver component). The provided docume...
CVE-2025-49706
CVE-2025-49706 is an improper authentication vulnerability in Microsoft SharePoint that is exploited as part of the ToolShell chain to gain unauthenticated access and enable further exploitation (e.g., CVE-2025-53770 RCE). Public sources describe exploitation via ToolPane.aspx to bypass auth, lea...
CVE-2025-49684
Technical details about CVE-2025-49684 (affected product, version, root cause, exploitability) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2025-49679
Technical details about CVE-2025-49679 (affected product/module, root cause, impact, and remediation) are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (KB/SSU) and ENISA EUVD for specifics.
CVE-2025-49678
Technical details for CVE-2025-49678 (affected product, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2025-49675
Technical details (affected product, exploit specifics, root cause) are not provided in the connected documents. Monitor for official CVE disclosures and vendor advisories for concrete remediation and impact.
CVE-2025-49666
CVE-2025-49666 is a Windows Kernel flaw described as a heap-based buffer overflow that enables remote code execution by an authorized attacker over a network. Public data lists attack vector as Network with high impact to confidentiality, integrity, and availability, and requires HIGH privileges ...
CVE-2025-48821
Technical details about CVE-2025-48821 are not provided in the supplied documents. No specific affected products, exploit information, or mitigation are described here; monitor for official updates and published fixes.
CVE-2025-48809
CVE-2025-48809 corresponds to a Windows Secure Kernel Mode information disclosure vulnerability in the Windows kernel. Publicly cited description states that a processor optimization removal or modification of security-critical code in the Windows Kernel can allow an authorized local attacker to ...
CVE-2025-48806
Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.
CVE-2025-47978
CVE-2025-47978 is a Windows Kerberos denial-of-service vulnerability caused by an out-of-bounds read. The description and related documents confirm that an authorized network attacker could exploit this condition to disrupt service. Affected are Windows Kerberos functions; the underlying issue is...
CVE-2025-49756
CVE-2025-49756 affects Microsoft Office Developer Platform. Description states that use of a broken or risky cryptographic algorithm allows an authorized attacker to bypass a security feature locally. Connected PT-2025-28630 references affected platform and notes no explicit fix version informati...
CVE-2025-49726
CVE-2025-49726 is a Windows vulnerability described as a use-after-free in Windows Notification that allows an authenticated local attacker to escalate privileges. The initial document provides a high-level impact (local, high confidentiality/integrity/availability impact) and does not reveal exp...
CVE-2025-49717
CVE-2025-49717 is a Microsoft SQL Server remote code execution vulnerability caused by a heap-based buffer overflow in SQL Server. The impact is network-exploitable with authenticated attacker privileges (low) and no user interaction, under changed scope, per the CVSS data. Public disclosures and...
NTFS Elevation of Privilege Vulnerability
Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...