3989 matches found
CVE-2025-48809
CVE-2025-48809 corresponds to a Windows Secure Kernel Mode information disclosure vulnerability in the Windows kernel. Publicly cited description states that a processor optimization removal or modification of security-critical code in the Windows Kernel can allow an authorized local attacker to ...
CVE-2025-48806
Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.
CVE-2025-47978
CVE-2025-47978 is a Windows Kerberos denial-of-service vulnerability caused by an out-of-bounds read. The description and related documents confirm that an authorized network attacker could exploit this condition to disrupt service. Affected are Windows Kerberos functions; the underlying issue is...
CVE-2025-49756
CVE-2025-49756 affects Microsoft Office Developer Platform. Description states that use of a broken or risky cryptographic algorithm allows an authorized attacker to bypass a security feature locally. Connected PT-2025-28630 references affected platform and notes no explicit fix version informati...
CVE-2025-49726
CVE-2025-49726 is a Windows vulnerability described as a use-after-free in Windows Notification that allows an authenticated local attacker to escalate privileges. The initial document provides a high-level impact (local, high confidentiality/integrity/availability impact) and does not reveal exp...
CVE-2025-49717
CVE-2025-49717 is a Microsoft SQL Server remote code execution vulnerability caused by a heap-based buffer overflow in SQL Server. The impact is network-exploitable with authenticated attacker privileges (low) and no user interaction, under changed scope, per the CVSS data. Public disclosures and...
Windows Notification Elevation of Privilege Vulnerability
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Windows Storage Port Driver Information Disclosure Vulnerability
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally...
Windows Secure Kernel Mode Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...
Windows Kerberos Denial of Service Vulnerability
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network...
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally...
Office Developer Platform Security Feature Bypass Vulnerability
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...
Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
Windows Event Tracing Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
Universal Print Management Service Elevation of Privilege Vulnerability
Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally...
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...