Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel that originates from an attacker's ability to bypass certain features by exploiting the vulnerability...

Microsoft Network Connection Status Indicator 访问控制错误漏洞

Microsoft Network Connection Status Indicator is a built-in network connection status component of a Windows operating system from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Network Connection Status Indicator, which can be exploited by an attacker to...

PT-2025-42111

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description A use-after-free condition exists in Microsoft Office Visio. This occurs when a program attempts to access memory after it has been freed, potentially leading to arbitrary code...

Microsoft DWM Core Library 安全漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft DWM Core Library, which can be exploited by an attacker to gain elevated privileges...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component that can be exploited by an attacker to elevate privileges...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A denial of service vulnerability exists in Microsoft Office, which can be exploited by attackers to cause...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...

Microsoft Windows Cloud Files Mini Filter Driver 信息泄露漏洞

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver, which can be exploited by an attacker to obtain sensitive information...

Microsoft NtQueryInformation Token 安全漏洞

Microsoft NtQueryInformation Token is an API function from Microsoft Corporation USA. A security vulnerability exists in Microsoft NtQueryInformation Token, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a Competitive Condition Issue vulnerability that originates from an attacker's ability to elevate privileges by exploiting the vulnerability...

Microsoft Windows PrintWorkflowUserSvc 资源管理错误漏洞

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. A resource management error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc, which stems from an attacker's ability to elevate privilege...

Microsoft MapUrlToZone 缓冲区错误漏洞

Microsoft MapUrlToZone is a lightweight console application written in C++ from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft MapUrlToZone, which can be exploited by an attacker to obtain sensitive information...

PT-2025-42097

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization within the Microsoft Graphics Component. This allows an authoriz...

KLA89276 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote...

KLA89272 SUI vulnerability in Microsoft SQL Server

A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface, bypass security restrictions. Original advisories CVE-2025-59250 Related products Microsoft-SQL-Server CVE list CVE-2025-59250 critical Solution Install necessary...

Microsoft NTLM 信息泄露漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. An information disclosure vulnerability exists in Microsoft NTLM, which can be exploited by an attacker to perform spoofing attacks...

PT-2025-42117

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel, potentially allowing a local attacker to disclose information. Recommendations At the moment, there is no...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability that can be exploited by attackers to elevate privileges...

Microsoft Xbox Gaming Services 后置链接漏洞

Microsoft Xbox Gaming Services is an Xbox-related gaming service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Xbox Gaming Services, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...