EUVD-2025-34386

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2025-34396

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to deny service locally...

EUVD-2025-34280

Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally...

EUVD-2025-34287

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

EUVD-2025-34284

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34293

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

EUVD-2025-34283

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34286

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

EUVD-2025-34285

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34281

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2025-34295

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

EUVD-2025-34302

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34407

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

GHSA-987X-96FQ-9384 Duplicate Advisory: Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwq6-fmvp-qp68. This link is maintained to preserve external references. Original Description Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose...

EUVD-2025-34428

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34378

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...

Vulnerabilities fixed in Microsoft System Center

Microsoft has fixed vulnerabilities in System Center Configuration Manager. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, potentially gaining access to sensitive data or executing arbitrary code with elevated privileges. For successful misuse, the...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, bypass security measures and gain access to sensitive data. The most serious vulnerability has been assigned CVE-2025-55315 and is located i...

Vulnerabilities fixed in Microsoft Exchange

Microsoft has fixed vulnerabilities in Exchange Server. A malicious person could exploit the vulnerabilities to impersonate another user and grant themselves elevated privileges. For successful abuse, the malicious party must have prior authentication. Microsoft has made updates available that fi...

Symlink Attack

Overview Microsoft.Build.Tasks.Core is a This package contains the Microsoft.Build.Tasks assembly which implements the commonly used tasks of MSBuild. Affected versions of this package are vulnerable to Symlink Attack via improper handling of symbolic links before file access. An attacker can gai...