277 matches found
Microsoft Windows Kernel Number Error Vulnerability
The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to obtain sensitive information...
VulnCheck KEV: CVE-2024-38023
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2025-24074 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
...
GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings
...
CVE-2025-24072 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
...
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature locally...
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally...
PT-2025-10838 · Microsoft · Kernel Streaming Wow Thunk Service Driver +1
Name of the Vulnerable Software and Affected Versions: Kernel Streaming WOW Thunk Service Driver affected versions not specified Description: A heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Recommendations:...
Security Update for Microsoft .NET Core (March 2025)
The version of Microsoft .NET Core installed on the remote host is 8.0.x 8.0.14 or 9.0.x 9.0.3. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a...
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
...
CVE-2025-21369
Microsoft Digest Authentication Remote Code Execution Vulnerability...
CVE-2025-21322 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2025-21368
CVE-2025-21368 is a Microsoft Digest Authentication Remote Code Execution vulnerability. The provided metrics indicate CVSS 3.1 base score 8.8 (HIGH) with Network attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and the impact is full confidentiality, integrity...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Windows Kernel Security Feature Bypass Vulnerability
...
svcrdma: Address an integer overflow
...
CVE-2025-21372
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2025-21315
Microsoft Brokering File System Elevation of Privilege Vulnerability...