PT-2025-42005

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An incorrect implementation of the authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally. An unauthenticated...

PT-2025-42116

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A type confusion issue in Microsoft Office Excel allows unauthorized code execution locally. Exploitation involves accessing a resource using an incompatible type. This can lea...

PT-2025-41995

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free condition exists in the Microsoft Brokering File System component. This allows an unauthorized attacker to elevate privileges locally. A use-after-fre...

Microsoft JDBC Driver 输入验证错误漏洞

Microsoft JDBC Driver is a SQL Server database connection driver from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft JDBC Driver, which can be exploited by an attacker to perform a spoofing attack...

KLA89271 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited...

Microsoft Windows Cryptographic Services 安全漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services, which can be exploited by an attacker to obtain sensitive information...

PT-2025-42107

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use-after-free condition exists in Microsoft Office Word that could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

PT-2025-42104

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An issue exists in Microsoft Configuration Manager where improper neutralization of special elements in SQL commands allows an attacker to inject malicious SQL code...

Microsoft Graphics Component 竞争条件问题漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Graphics Component, which can be exploited by an attacker to elevate privileges...

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM that originates from an attacker exploiting the vulnerability to perform a spoofing...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component, which can be exploited by an attacker to elevate privileges...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component, which can be exploited by an attacker to cause a denial of service on the system...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Local Session Manager, which can be exploited by an attacker to cause a denial of service on the system...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. Microsoft Windows suffers from a Resource Management Error vulnerability that originates from a vulnerability that can be exploited by an attacker to remotely execute code...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. Microsoft Windows suffers from a Resource Management Error vulnerability that originates from a vulnerability that can be exploited by an attacker to remotely execute code...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. Microsoft Windows suffers from a Resource Management Error vulnerability that originates from a vulnerability that can be exploited by an attacker to remotely execute code...

Microsoft Windows COM 安全漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A security vulnerability exists in Microsoft Windows COM...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An information disclosure vulnerability exists in Microsoft Windows, which can be exploited by an attacker to obtain sensitive information...

Microsoft XBox 资源管理错误漏洞

Microsoft XBox is a gaming application from Microsoft, a U.S.-based company. A resource management error vulnerability exists in Microsoft XBox, which can be exploited by an attacker to elevate privileges...