147990 matches found
CVE-2025-53782
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally...
CVE-2025-49708
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...
CVE-2025-25004
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2025-59497
CVE-2025-59497 describes a time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender for Linux that allows an authorized local attacker to cause a denial of service. The available documents confirm the vulnerability is in Defender for Linux and that the impact is denial of service w...
CVE-2025-59497 Microsoft Defender for Linux Denial of Service Vulnerability
...
CVE-2025-59260 Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability
...
CVE-2025-59260 Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability
...
CVE-2025-59260
CVE-2025-59260 is an information-disclosure vulnerability in the Microsoft Failover Cluster Virtual Driver that can expose sensitive data to a locally authenticated attacker. The CVSS 3.1 vector indicates a local attack with low complexity and low privileges required, and a high confidentiality i...
CVE-2025-59248
CVE-2025-59248 maps to a Microsoft Exchange Server spoofing vulnerability caused by improper input validation, enabling an unauthenticated attacker to leverage network spoofing. Connected sources (CNVD/EUVD and MSRC/MSKB entries) confirm this spoofing flaw and its association with Exchange Server...
CVE-2025-59248 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2025-59248 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2025-59238
CVE-2025-59238 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an attacker to execute code locally. The CVE is associated with PowerPoint components affected by the vulnerability, with the attacker having local access (attack vector: LOCAL), needing user interaction (...
CVE-2025-59238 Microsoft PowerPoint Remote Code Execution Vulnerability
...
CVE-2025-59229 Microsoft Office Denial of Service Vulnerability
...
CVE-2025-59229 Microsoft Office Denial of Service Vulnerability
...
CVE-2025-59232 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2025-59232
CVE-2025-59232 is an information-disclosure vulnerability in Microsoft Excel (part of Microsoft Office) caused by an out-of-bounds read that can disclose local data. The issue affects Excel components within Office; remediation is available via Microsoft Office security updates released October 2...
CVE-2025-59229
CVE-2025-59229 is a denial-of-service vulnerability in Microsoft Office caused by an uncaught exception in Office components. The issue affects multiple Office products as part of the September/October 2025 update cycle, with local attacker access required (attack vector Local, user interaction r...
