CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability

...

CVE-2025-59281

Xbox Gaming Services suffers an elevation of privilege via improper link resolution before file access ("link following"). An authorized local attacker can escalate to higher privileges. CVSSv3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, no user interaction. Remediation...

CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability

...

CVE-2025-59258 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

...

CVE-2025-59258 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

...

CVE-2025-59258

CVE-2025-59258 is an information-disclosure vulnerability affecting Windows Active Directory Federation Services (ADFS). The incident involves insertion of sensitive data into ADFS log files, enabling a local attacker to disclose information. The CVE is characterized in the provided data as a loc...

CVE-2025-59204 Windows Management Services Information Disclosure Vulnerability

...

CVE-2025-59204

CVE-2025-59204 concerns Windows Management Services and is triggered by use of an uninitialized resource, leading to local information disclosure. The impact is confidentiality loss with local attack vector (required local access, no user interaction). The connected documents confirm Windows secu...

CVE-2025-59204 Windows Management Services Information Disclosure Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59202

CVE-2025-59202 is a local privilege escalation via a use-after-free in Windows Remote Desktop Services. The Connected documents confirm affected component as Windows Remote Desktop Services and list the CVE with a high-severity context, but do not provide exploit details. No root-cause specifics ...

October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services

None None...

October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band

None None...

Windows Cryptographic Services Information Disclosure Vulnerability

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

October 23, 2025—KB5070881 (OS Build 26100.6905) Out-of-band

None None...

October 24, 2025—KB5070893 (OS Build 26100.6905) Security Update for Windows Server Update Services

None None...

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...