147990 matches found
CVE-2025-59189
CVE-2025-59189 is a local privilege-escalation in Microsoft Brokering File System (Windows). Description: use-after-free in the Brokering File System allows a non-remote, local attacker to escalate privileges. The patched fix is included in the October 2025 Windows security update KB5066835 (OS B...
CVE-2025-59189 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-59189 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-59188 Microsoft Failover Cluster Information Disclosure Vulnerability
...
CVE-2025-59188 Microsoft Failover Cluster Information Disclosure Vulnerability
...
CVE-2025-59188
CVE-2025-59188 is described as an information-disclosure vulnerability in the Windows Failover Cluster that could allow an authorized local attacker to disclose sensitive information. The available connected MS advisories and vulnerability lists indicate this affects Windows Failover Cluster and ...
CVE-2025-59294 Windows Taskbar Live Preview Information Disclosure Vulnerability
...
CVE-2025-47979 Microsoft Failover Cluster Information Disclosure Vulnerability
...
CVE-2025-47979 Microsoft Failover Cluster Information Disclosure Vulnerability
...
CVE-2025-47979
Technical details about CVE-2025-47979 (affected component, root cause, exploitability, and remediation specifics) are not disclosed in the provided documents. Monitor for updates from official advisories (Microsoft/MSRC, NVD, NCSC) for precise information.
CVE-2025-59254 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59249
CVE-2025-59249 is a Microsoft Exchange Server elevation-of-privilege vulnerability described as caused by weak authentication. The CVE is discussed across multiple sources (CNVD, EUVD, NCSC, MSRC and CVE listings) with details indicating that an attacker who is already authenticated can escalate ...
CVE-2025-59249 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-59243
Summary (CVE-2025-59243) : This is a Microsoft Excel/Office vulnerability described as a use-after-free in Excel that can allow an attacker to locally execute code. The CVE is tied to the Excel component and is listed with a high impact in the CVSS vector (Local exploit, require user interaction,...
CVE-2025-59243 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-59243 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-49708
CVE-2025-49708: A use-after-free vulnerability in the Microsoft Graphics Component can allow an authorized attacker to elevate privileges over the network. Connected Microsoft security updates and advisories indicate this issue is addressed in October 2025 Windows updates (KBs referenced in KB506...