CVE-2025-21281

Microsoft COM for Windows Elevation of Privilege Vulnerability...

CVE-2025-21281

Microsoft COM for Windows Elevation of Privilege Vulnerability...

CVE-2025-21272

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21272

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21288 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21288 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21288

Technical details about CVE-2025-21288 are not publicly provided in the supplied connected documents; the record notes a Windows COM Server information disclosure vulnerability but lacks specifics on affected products/versions or mitigations. Monitor for official disclosures.

CVE-2025-21281 Microsoft COM for Windows Elevation of Privilege Vulnerability

...

CVE-2025-21281 Microsoft COM for Windows Elevation of Privilege Vulnerability

...

CVE-2025-21281

CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...

CVE-2025-21272 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21272 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

Windows COM Server Information Disclosure Vulnerability

...

Microsoft COM for Windows Elevation of Privilege Vulnerability

...

CVE-2025-21281: Use After Free

Microsoft COM for Windows Elevation of Privilege Vulnerability...

CVE-2025-21272: Use of Uninitialized Resource

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21288: Use of Uninitialized Resource

Windows COM Server Information Disclosure Vulnerability...

PT-2025-1082

Name of the Vulnerable Software and Affected Versions Windows COM Server affected versions not specified Description The issue is related to the use of an uninitialized resource in the Windows COM Server, which can allow an attacker to gain unauthorized access to protected information. This is an...

PT-2025-4197

Name of the Vulnerable Software and Affected Versions Windows COM Server affected versions not specified Description The issue allows attackers to obtain sensitive information and affect the system. It is related to information disclosure. Recommendations At the moment, there is no information...