CVE-2025-26646

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-29973

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2025-29976

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...

CVE-2025-29976

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...

CVE-2025-29973

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2025-29969

Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...

CVE-2025-29968

Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...

CVE-2025-29956

Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network...

CVE-2025-29837

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2025-29841

Concurrent execution using shared resource with improper synchronization 'race condition' in Universal Print Management Service allows an authorized attacker to elevate privileges locally...

CVE-2025-27488

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally...

CVE-2025-29826

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...

CVE-2025-27488

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally...

CVE-2025-29826

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...

CVE-2025-24063

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-30385

Technical details about CVE-2025-30385 are not provided in the connected documents. The initial description mentions a Windows use-after-free in the CLFS driver that could elevate privileges, but no vendor/version specifics or fixes are disclosed here. Monitor for authoritative updates.

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.