CVE-2025-59202

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2025-59202

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2025-58737

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally...

CVE-2025-58737

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally...

CVE-2025-58718

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2025-58722

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-58718

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2025-58722

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-55681

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-55681

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-55340

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...

CVE-2025-55340

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...

CVE-2025-58737

CVE-2025-58737 is a Windows Remote Desktop Protocol (RDP) Remote Code Execution vulnerability described as a use-after-free in the Remote Desktop implementation that allows a local attacker to execute code. The CVE entry shows a base score of 7.0 (HIGH) with LOCAL access, HIGH confidentiality/int...

CVE-2025-58737 Remote Desktop Protocol Remote Code Execution Vulnerability

...

CVE-2025-58737 Remote Desktop Protocol Remote Code Execution Vulnerability

...

CVE-2025-58718 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2025-58718 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2025-58718

CVE-2025-58718 is a use-after-free in the Windows Remote Desktop Client that allows a network-based, unauthenticated attacker to execute code on the affected system. CVSSv3.1 shows AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH); exploitation requires user interaction. Connect...

CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-59254

Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...