CVE-2025-59257

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-59259

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-58729

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-58729

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-58729

CVE-2025-58729 affects Windows Local Session Manager (LSM). The connected documents confirm an issue with improper validation of input type in LSM, allowing an authorized attacker to cause a Denial of Service over the network . The CVSS vectors indicate network access, low attack complexity, and ...

CVE-2025-58729 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-58729 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-59259 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-59259 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-59259

CVE-2025-59259 affects Windows Local Session Manager (LSM) with an improper validation of input type, enabling an unauthenticated? authorized user to cause Denial of Service over a network. According to the CVE description and EUVD-2025-34370, the exploitability is network-based (AV:N, AC:L, PR:L...

CVE-2025-59257

CVE-2025-59257 affects Windows Local Session Manager (LSM). The issue is described as improper validation of a specific input type, enabling an authorized attacker to cause Denial of Service over the network. Affected context in Connected docs confirms Windows components and LSM as the vulnerable...

CVE-2025-59257 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-59257 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-42908

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

CVE-2025-42908 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

CVE-2025-42908 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

CVE-2025-42908

CVE-2025-42908 describes a CSRF vulnerability in SAP NetWeaver Application Server for ABAP where an authenticated attacker can initiate transactions via the session manager, bypassing the initial transaction screen and authorization check, potentially enabling actions that normally require specif...