CVE-2025-49671

Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-48815

Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48384

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config entry, values with ...

CVE-2025-47988

Azure Monitor Agent (Microsoft) is vulnerable to CVE-2025-47988 due to improper control of code generation, enabling remote code execution over an adjacent network. Connected sources confirm affected versions are older than 1.35.1 and describe the issue as remote code execution via code injection...

CVE-2025-49744 Windows Graphics Component Elevation of Privilege Vulnerability

...

CVE-2025-49727 Win32k Elevation of Privilege Vulnerability

...

CVE-2025-49683

Technical details about CVE-2025-49683 (VHDX integer overflow) are not provided in the connected documents. Monitor for updates.

CVE-2025-49668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2025-49667 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

...

CVE-2025-49665

Technical details about CVE-2025-49665 are not publicly available in the provided connected documents. The current materials only include a general description and CVSS metrics. Monitor for updates from official advisories.

CVE-2025-49663

Technical details for CVE-2025-49663 are not provided in the connected documents; the initial description mentions RRAS heap overflow but lacks concrete product/version/impact details—monitor for updates.

CVE-2025-48819

Technical details about CVE-2025-48819 are not publicly provided in the supplied documents; no product/version/root-cause/impact information is included beyond the basic description. Monitor for official updates.

CVE-2025-47981 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

...

CVE-2025-47982

CVE-2025-47982 affects Windows Storage VSP Driver. The root cause is improper input validation, enabling a locally authenticated attacker to elevate privileges. CVSS v3.1 base score 7.8 (HIGH) with local, low-complexity, no user interaction required; impact includes high confidentiality, integrit...

CVE-2025-49723

CVE-2025-49723 affects Windows StateRepository API, enabling local tampering of data due to missing authorization in the Server file path. The CNVD/NCSC entries confirm impact as manipulation of data with a high CVSS (8.8) and local attack vector; no public exploitation details are provided in th...

CVE-2025-49711

Microsoft Office Excel is affected by CVE-2025-49711 (Use-after-free in Excel) enabling local code execution. The vulnerability is documented across multiple sources, with the Microsoft Excel RCE identified as the root cause and trusted updates released. Affected products include Microsoft Excel ...

CVE-2025-49691

CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...

CVE-2025-49688

Public documents provided do not contain additional technical details (affected product/version, root cause, remediation) beyond the initial description. Monitor for updates from the listed sources as new information becomes available.

CVE-2025-47986

CVE-2025-47986 : Affected software is the Windows Universal Print Management Service. The vulnerability is a use-after-free in that service, enabling an authorized attacker to achieve local privilege escalation. The CVE has a high impact (8.8/10) with local, privilege-related execution and a chan...

CVE-2025-496968

creationtimestamp| type| source ---|---|--- 2025-07-08 16:24:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215 2025-07-19 09:40:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215...