CVE-2025-46334

Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable always includes...

PT-2025-29115

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.0 through 2.4.63 Description: A Server-Side Request Forgery SSRF issue exists in Apache HTTP Server on Windows. This issue potentially allows the leakage of NTLM hashes to a malicious server via mod rewrite or...

CVE-2025-0141

CVE-2025-0141 corresponds to an incorrect privilege assignment in Palo Alto Networks GlobalProtect App. The vulnerability allows a locally authenticated, non-administrative user to escalate to root on macOS/Linux or to NT AUTHORITY\SYSTEM on Windows. Affected platforms exclude GlobalProtect on iO...

CVE-2025-49724

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...

CVE-2025-49667

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2025-48823

Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network...

CVE-2025-48000

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-47981

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network...

CVE-2025-48819 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

...

CVE-2025-48819

Technical details about CVE-2025-48819 are not publicly provided in the supplied documents; no product/version/root-cause/impact information is included beyond the basic description. Monitor for official updates.

CVE-2025-48811 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2025-48809 Windows Secure Kernel Mode Information Disclosure Vulnerability

...

CVE-2025-48803 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

CVE-2025-48803 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

CVE-2025-47978 Windows Kerberos Denial of Service Vulnerability

...

CVE-2025-49686 Windows TCP/IP Driver Elevation of Privilege Vulnerability

...

CVE-2025-49658

CVE-2025-49658 is an information-disclosure vulnerability in Windows that arises from an out-of-bounds read in the TDX.sys driver. Impact: an authenticated, local attacker with LOW privileges could disclose sensitive data (C: HIGH, I: NONE, A: NONE; CVSS 5.5/LOCAL). Affected component: Windows Tr...

Windows Secure Kernel Mode Information Disclosure Vulnerability

Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...