CVE-2025-49708

CVE-2025-49708: A use-after-free vulnerability in the Microsoft Graphics Component can allow an authorized attacker to elevate privileges over the network. Connected Microsoft security updates and advisories indicate this issue is addressed in October 2025 Windows updates (KBs referenced in KB506...

CVE-2025-59242

CVE-2025-59242 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation for an authenticated user. Connected Microsoft KB advisories confirm the vendor-fixed remediation via October 2025 security updates (e.g., KB5066793 and rela...

CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege Vulnerability

...

CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-59207 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-59207 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-59207

CVE-2025-59207 is an elevation-of-privilege vulnerability in the Windows Kernel caused by an untrusted pointer dereference, enabling a locally authenticated attacker to elevate privileges. The Initial Description confirms the vulnerability type and impact. The Connected Documents provide Windows-...

CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59201

CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...

CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-59202

CVE-2025-59202 is a local privilege escalation via a use-after-free in Windows Remote Desktop Services. The Connected documents confirm affected component as Windows Remote Desktop Services and list the CVE with a high-severity context, but do not provide exploit details. No root-cause specifics ...

CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-59199 Software Protection Platform (SPP) Elevation of Privilege Vulnerability

...

CVE-2025-59199 Software Protection Platform (SPP) Elevation of Privilege Vulnerability

...

CVE-2025-59196 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-59196 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...