6722 matches found
CVE-2025-22871
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
CVE-2025-22871
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
CVE-2025-27741
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...
CVE-2025-26663
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...
CVE-2025-24060 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability
...
CVE-2025-29802 Visual Studio Elevation of Privilege Vulnerability
...
CVE-2025-27735 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
...
CVE-2025-27729
CVE-2025-27729 is a Windows Shell remote code execution issue described as a use-after-free vulnerability that enables local code execution. The linked sources confirm this affects Windows Shell and related components, with Microsoft providing security updates to remediate the flaw (for example K...
CVE-2025-27486 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
...
CVE-2025-27487 Remote Desktop Client Remote Code Execution Vulnerability
...
CVE-2025-27467
CVE-2025-27467 affects Windows Digital Media, with a use-after-free flaw that enables local privilege escalation for an authenticated user with low privileges and no user interaction. The CVSS 3.1 base metrics provided by Microsoft indicate AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.8 (HIG...
CVE-2025-26679 RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
...
CVE-2025-26674 Windows Media Remote Code Execution Vulnerability
...
CVE-2025-26671 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2025-26670 Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
...
CVE-2025-25002 Azure Local Cluster Information Disclosure Vulnerability
...
CVE-2025-21191
CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...
CVE-2025-27745
CVE-2025-27745 is a Microsoft Office remote code execution vulnerability described as a use-after-free in Office that enables local code execution. Public details in connected sources confirm the affected software is Microsoft Office (various components) with the root cause tied to use-after-free...