9437 matches found
CVE-2025-7326
creationtimestamp| type| source ---|---|--- 2025-07-08 17:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthucdddlr2s...
CVE-2025-49731
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
CVE-2025-49697
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-48820
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
CVE-2025-48808
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2025-49697 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2025-49680
CVE-2025-49680 affects the Windows Performance Recorder component. Root cause: improper link resolution before file access ("link following"). Impact: local Denial-of-Service by an authenticated user. Public details in connected documents confirm the vulnerability type and affected component, wit...
CVE-2025-49680 Windows Performance Recorder (WPR) Denial of Service Vulnerability
...
CVE-2025-49665 Workspace Broker Elevation of Privilege Vulnerability
...
CVE-2025-49670
Technical details about CVE-2025-49670 (affected software, root cause, impact, and fixes) are not provided in the connected documents; only the initial description is available. Monitor for updates to obtain concrete vulnerability specifics.
CVE-2025-47985 Windows Event Tracing Elevation of Privilege Vulnerability
...
CVE-2025-21195 Azure Service Fabric Runtime Elevation of Privilege Vulnerability
...
CVE-2025-33054
CVE-2025-33054 affects the Remote Desktop Client and is caused by insufficient UI warnings for dangerous operations, enabling spoofing over the network. Affected product: Microsoft Remote Desktop Client on Windows/Windows Server. Impact is spoofing of the user interface with high CVSS score (3.1:...
CVE-2025-479947
creationtimestamp| type| source ---|---|--- 2025-07-08 16:24:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215 2025-07-19 09:40:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215...
CVE-2025-6771
OS command injection in Ivanti Endpoint Manager Mobile EPMM before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve remote code execution...
CVE-2025-49724
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti4j3tvvt27...
CVE-2025-49729
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti5ejncff2w...
CVE-2025-47998
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...