CVE-2025-53150

CVE-2025-53150 is a Use-After-Free vulnerability in Windows Digital Media that enables a locally authenticated attacker to elevate privileges. Public documents (NVD, NCSC, EUVD, CIRCL/CVE listings) describe the issue as a local privilege-escalation bug but do not provide concrete details on affec...

CVE-2025-59295 Windows URL Parsing Remote Code Execution Vulnerability

...

CVE-2025-59284

CVE-2025-59284 is Windows NTLM spoofing vulnerability with local attack vector affecting NTLM-related components. The description confirms exposure of sensitive information to an unauthorized actor, enabling spoofing locally. Connected MS advisories and listings indicate Microsoft released update...

CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability

...

CVE-2025-59257

CVE-2025-59257 affects Windows Local Session Manager (LSM). The issue is described as improper validation of a specific input type, enabling an authorized attacker to cause Denial of Service over the network. Affected context in Connected docs confirms Windows components and LSM as the vulnerable...

CVE-2025-59257 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-59196 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-59196 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-55701 Windows Authentication Elevation of Privilege Vulnerability

...

CVE-2025-55681 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2025-55677 Windows Device Association Broker Service Elevation of Privilege Vulnerability

...

CVE-2025-55676 Windows USB Video Class System Driver Information Disclosure Vulnerability

...

CVE-2025-55339 Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

...

CVE-2025-55333

CVE-2025-55333 describes an authentication bypass in Windows BitLocker caused by an incomplete factor comparison, enabling a physical attacker to bypass a security feature. The initial entry notes exploitation status as null and does not specify affected product versions beyond Windows BitLocker;...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally...

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

CVE-2025-11713

Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and...