CVE-2025-21269 Windows HTML Platforms Security Feature Bypass Vulnerability

...

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-21252 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21249 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-21235 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2025-21207

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpucyaapb2h 2025-01-14 18:41:01+00:00| seen|...

CVE-2025-21315

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:21:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpukn66232p 2025-01-15 00:26:29+00:00| seen|...

CVE-2025-21354

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:11:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113828054122742443 2025-01-14 18:22:47+00:00| seen|...

CVE-2025-21240

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:18:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuf4ulzk2n 2025-01-14 18:33:34+00:00| seen|...

CVE-2025-21318

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:21:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpukv3xpq2n 2025-01-15 00:41:29+00:00| seen|...

CVE-2025-21370

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:23:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpunpflfj2r 2025-01-14 20:09:15+00:00| seen|...

CVE-2025-21223

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpudsd2ko2t 2025-01-14 19:26:04+00:00| seen|...

CVE-2025-21225

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpudwwjxn2s 2025-01-14 19:26:05+00:00| seen|...

CVE-2024-12086

creationtimestamp| type| source ---|---|--- 2025-01-14 17:17:49+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113827844477308185 2025-01-14 18:09:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1554 2025-01-14 18:15:45+00:00| seen|...

CVE-2024-13172

CVE-2024-13172 affects Ivanti Endpoint Manager (EPM) prior to the 2024 Jan-2025 Security Update and 2022 SU6 Jan-2025 Security Update, due to improper signature verification that allows a remote unauthenticated attacker to achieve remote code execution, with local user interaction required. Ivant...

CVE-2025-0458

creationtimestamp| type| source ---|---|--- 2025-01-14 16:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpnkapczw2f 2025-01-14 16:48:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfppeb37wl2q 2025-01-14 18:10:53+00:00| seen|...

CVE-2025-22984

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...

CVE-2024-56374

creationtimestamp| type| source ---|---|--- 2025-01-14 15:44:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfplsm3dgw23 2025-01-14 19:09:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1564 2025-01-14 19:16:18+00:00| seen|...

CVE-2025-0458

CVE-2025-0458 affects Virtual Computer Vysual RH Solution 2024.12.1, where the Login Panel’s /index.php contains vulnerable functionality. The described issue arises from manipulating the page argument, enabling remote cross-site scripting (XSS). The vulnerability is publicly disclosed and attack...