23691 matches found
CVE-2025-33058
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-33056
Improper access control in Microsoft Local Security Authority Server lsasrv allows an unauthorized attacker to deny service over a network...
CVE-2025-33053
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network...
CVE-2025-33052
Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2025-32725
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2025-32719
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-32718
Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally...
CVE-2025-32716
Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2025-32715
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2025-32712
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-32710
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
CVE-2025-24069
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-22256
A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP requests...
CVE-2025-24065
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2024-43706
Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint...
CVE-2025-48937
creationtimestamp| type| source ---|---|--- 2025-06-10 17:14:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbfegwxrw2e 2025-06-13 18:04:24+00:00| seen| https://gist.github.com/EbonJaeger/94d6b11fee980a997a2d1e6007418f90...
CVE-2025-47175
Microsoft PowerPoint CVE-2025-47175 is a Use-After-Free in PowerPoint that can lead to local code execution when a user opens a crafted PPTX file. Exploit details in connected sources indicate a local attacker must persuade a victim to open the file (PoC guidance exists for PowerPoint 2019 / Offi...
CVE-2025-47174 Microsoft Excel Remote Code Execution Vulnerability
...
