CVE-2025-53143

Access of resource using incompatible type 'type confusion' in Windows Message Queuing allows an authorized attacker to execute code over a network...

CVE-2025-53760

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2025-53723

Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

CVE-2025-53720

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

CVE-2025-53779

Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

CVE-2025-53142

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-53788

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2025-53726

Access of resource using incompatible type 'type confusion' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2025-53133

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

CVE-2025-53788

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2025-53789

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2025-53789

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

CVE-2025-53769

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

CVE-2025-53760

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2025-53729

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2025-53729

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2025-53726

Access of resource using incompatible type 'type confusion' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...