CVE-2025-26637

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

CVE-2025-29816 Microsoft Word Security Feature Bypass Vulnerability

...

CVE-2025-29816

CVE-2025-29816 is a Microsoft Word security feature bypass vulnerability in Office Word. The available details show improper input validation in Word that allows an unauthenticated attacker to bypass a security feature over a network, effectively bypassing protections. The CVSS data (AV:N/AC:H/PR...

CVE-2025-29809

CVE-2025-29809 is a Windows Kerberos security feature bypass vulnerability. The issue involves insecure storage of sensitive information in Kerberos, enabling an attacker with local access and low privileges, and no user interaction, to bypass a security feature. Affected product/area: Windows Ke...

CVE-2025-29809 Windows Kerberos Security Feature Bypass Vulnerability

...

CVE-2025-27737 Windows Security Zone Mapping Security Feature Bypass Vulnerability

...

CVE-2025-27737 Windows Security Zone Mapping Security Feature Bypass Vulnerability

...

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

CVE-2025-27735 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...

CVE-2025-27735 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...

CVE-2025-26678 Windows Defender Application Control Security Feature Bypass Vulnerability

...

CVE-2025-26678 Windows Defender Application Control Security Feature Bypass Vulnerability

...

CVE-2025-26678

CVE-2025-26678 is a local security bypass in Windows Defender Application Control (WDAC) due to improper access control. The issue affects WDAC’s security feature and can be exploited locally to bypass protections. Public sources confirm the vulnerability and that updates released in April 2025 f...

CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability

...

CVE-2025-26637 Windows BitLocker Security Feature Bypass Vulnerability

...

CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability

...

CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability

...

CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability

...

CVE-2025-29822

CVE-2025-29822 affects Microsoft OneNote (Office) with an incomplete input validation in OneNote that allows local security feature bypass. The issue is classified as high severity (CVSS 3.1: 7.8; Local attack, no privileges required, user interaction required; impacts Confidentiality, Integrity,...