EUVD-2025-34352

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-59290

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59289

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59278

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2025-59278

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2025-59281

Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2025-59277

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2025-59257

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-59259

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-59259

Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-59253

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

CVE-2025-59253

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

CVE-2025-59249

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-59255

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-59237

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-59237

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-59230

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-59228

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-59203

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...

CVE-2025-59205

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...