CVE-2025-48808

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-48808

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-48811

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-48806

Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally...

CVE-2025-48802

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network...

CVE-2025-48802

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network...

CVE-2025-48002

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-48799

Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48000

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-47993

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-47986

Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally...

CVE-2025-47982

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-47975

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-47976

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-47178

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network...

CVE-2025-47159

Protection mechanism failure in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-26636

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-49744

CVE-2025-49744 — Microsoft Graphics Component heap-based buffer overflow can allow an authorized, local attacker to escalate privileges. Connected sources confirm this as an elevation-of-privilege vulnerability in the Microsoft Graphics Component (a graphics driver component). The provided docume...

CVE-2025-49706

CVE-2025-49706 is an improper authentication vulnerability in Microsoft SharePoint that is exploited as part of the ToolShell chain to gain unauthenticated access and enable further exploitation (e.g., CVE-2025-53770 RCE). Public sources describe exploitation via ToolPane.aspx to bypass auth, lea...

CVE-2025-49684

Technical details about CVE-2025-49684 (affected product, version, root cause, exploitability) are not provided in the supplied documents. Monitor for updates from official advisories.