23594 matches found
CVE-2025-47167
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-47162
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-33075
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-33073
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network...
CVE-2025-33071
Use after free in Windows KDC Proxy Service KPSSVC allows an unauthorized attacker to execute code over a network...
CVE-2025-33066
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-33058
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-33056
Improper access control in Microsoft Local Security Authority Server lsasrv allows an unauthorized attacker to deny service over a network...
CVE-2025-33053
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network...
CVE-2025-33052
Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2025-32725
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2025-32719
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-32718
Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally...
CVE-2025-32716
Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2025-32715
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2025-32712
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-32710
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
CVE-2025-24069
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-22256
A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP requests...