2999 matches found
PT-2025-30: NULL pointer dereference in Windows Ancillary Function Driver for WinSock
The Null pointer dereference vulnerability was discovered in the Windows Ancillary Function Driver for WinSock. The vulnerability allows an authorized attacker to gain SYSTEM privileges. The affected products: Windows 10 Version 1809 for x64-based & 32-bit Systems Versions to 10.0.17763.7678...
PT-2025-32783 · Microsoft · Windows Nt Rras +1
Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: A heap-based buffer overflow exists in Windows Routing and Remote Access Service RRAS. This issue allows an authorized attacker to execute code over a...
PT-2025-32817 · Microsoft · Desktop Windows Manager +1
Name of the Vulnerable Software and Affected Versions: Desktop Windows Manager affected versions not specified Description: A use after free issue exists in Desktop Windows Manager that could allow an authorized attacker to execute code locally. Recommendations: At the moment, there is no...
PT-2025-32740
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. Recommendations: At the moment, there is no...
PT-2025-32849 · Microsoft · Azure Stack
Name of the Vulnerable Software and Affected Versions: Azure Stack affected versions not specified Description: An authorized attacker can disclose private personal information locally in Azure Stack. This allows exposure of this information to an unauthorized actor. Recommendations: At the momen...
PT-2025-32810
Name of the Vulnerable Software and Affected Versions: Windows Message Queuing affected versions not specified Description: An issue exists in Windows Message Queuing related to access of a resource using an incompatible type, also known as a 'type confusion'. This allows an authorized attacker t...
PT-2025-32775 · Microsoft · Windows Ancillary Function Driver For Winsock +1
Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: A race condition exists due to improper synchronization when using shared resources. This allows an authorized attacker to elevate privileges locally...
PT-2025-32809 · Microsoft · Brokering File System +1
Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: A use after free issue exists in Microsoft Brokering File System that could allow an authorized attacker to elevate privileges locally. Recommendations: At the momen...
Microsoft SharePoint Code Injection Vulnerability
Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust...
CVE-2025-53771
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-54079
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the endpoint /html/atendido/ProfileAtendido.php, in the idatendido parameter. This vulnerability allow an authorized...
Microsoft SharePoint Server Spoofing Vulnerability
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-47182
Improper input validation in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
BIT-DOTNET-SDK-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
CVE-2025-47999
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...
CVE-2025-48802
Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network...
CVE-2025-48002
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network...
CVE-2025-48809
Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...