147991 matches found
CVE-2025-58722 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-58722 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-53782
CVE-2025-53782 refers to an elevation-of-privilege vulnerability in Microsoft Exchange Server caused by an incorrect implementation of the authentication algorithm, enabling an unauthorized, local attacker to escalate privileges. Across connected sources, the vulnerability is associated with mult...
CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
EUVD-2025-34430
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
CVE-2025-48004
CVE-2025-48004 is a local privilege elevation in Microsoft Brokering File System caused by a use-after-free bug. The vulnerability allows an authenticated local attacker to escalate privileges. Public disclosures identify the affected component as the Microsoft Brokering File System, with CVSS-li...
2025-10 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2 for x64 (KB5066129)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Microsoft raises the bar: A smarter way to measure AI for cybersecurity
ExCyTIn-Bench is Microsoft’s newest open-source benchmarking tool designed to evaluate how well AI systems perform real-world cybersecurity investigations.1 It helps business leaders assess language models by simulating realistic cyberthreat scenarios and providing clear, actionable insights into...
Microsoft Limits IE Mode in Edge After Chakra Zero-Day Activity Detected
Microsoft restricted access to Edge's IE Mode in August 2025 after hackers used a Chakra zero-day flaw to bypass security and take over user devices. Check out the new steps for enabling IE Mode...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Spoofing Vulnerability
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
Microsoft Office Denial of Service Vulnerability
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally...
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Failover Cluster Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally...
Microsoft Failover Cluster Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally...