CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2025-21304

CVE-2025-21304 affects the Windows DWM Core Library (Desktop Window Manager). The connected sources confirm a local elevation of privilege vulnerability in the DWM Core Library, with the CVSS 3.1 metrics indicating local attack vector, low attack complexity, and need for low privileges, leading t...

CVE-2025-21296

CVE-2025-21296 corresponds to a BranchCache remote code execution vulnerability in Microsoft BranchCache. Connected sources describe BranchCache as a WAN optimization feature and indicate a vulnerability that could allow remote code execution. The CVE entry itself lists a 7.5 CVSSv3.1 score with ...

CVE-2025-21280 Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

CVE-2025-21269 Windows HTML Platforms Security Feature Bypass Vulnerability

...

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-21252 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21249 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21235 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2025-21315

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:21:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpukn66232p 2025-01-15 00:26:29+00:00| seen|...

CVE-2025-21207

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpucyaapb2h 2025-01-14 18:41:01+00:00| seen|...

CVE-2025-21354

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:11:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113828054122742443 2025-01-14 18:22:47+00:00| seen|...

CVE-2025-21240

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:18:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuf4ulzk2n 2025-01-14 18:33:34+00:00| seen|...

CVE-2025-21370

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:23:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpunpflfj2r 2025-01-14 20:09:15+00:00| seen|...

CVE-2025-21318

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:21:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpukv3xpq2n 2025-01-15 00:41:29+00:00| seen|...

CVE-2025-21223

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpudsd2ko2t 2025-01-14 19:26:04+00:00| seen|...

CVE-2025-21225

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpudwwjxn2s 2025-01-14 19:26:05+00:00| seen|...

CVE-2024-12086

creationtimestamp| type| source ---|---|--- 2025-01-14 17:17:49+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113827844477308185 2025-01-14 18:09:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1554 2025-01-14 18:15:45+00:00| seen|...

CVE-2024-13172

CVE-2024-13172 affects Ivanti Endpoint Manager (EPM) prior to the 2024 Jan-2025 Security Update and 2022 SU6 Jan-2025 Security Update, due to improper signature verification that allows a remote unauthenticated attacker to achieve remote code execution, with local user interaction required. Ivant...