CVE-2025-49726

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

CVE-2025-49723

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...

CVE-2025-49717

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2025-49722

Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network...

CVE-2025-49706

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49704

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-49701

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-49694

Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49693

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49686

Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2025-49682

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2025-49685

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2025-49684

Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2025-49678

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2025-49677

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49679

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2025-49675

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-49675

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-49666

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network...

CVE-2025-49664

Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally...