CVE-2025-24999

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-53144

CVE-2025-53144 is a Windows Message Queuing (MSMQ) remote code execution vulnerability caused by a type confusion flaw in MSMQ. The issue allows an attacker to execute code over the network on a affected Windows host when MSMQ is reachable; CVSSv3.1 indicates AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H w...

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Null pointer dereference in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Message Queuing allows an authorized attacker to execute code over a network...

PT-2025-32759 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The software contains an improper neutralization of special elements used in an SQL command, leading to a potential SQL injection issue. This allows an authorized attacker to elevate...

CVE-2025-25005: Improper Input Validation

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

CVE-2025-47954: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-53722: Uncontrolled Resource Consumption

Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network...

CVE-2025-53148: Use of Uninitialized Resource

Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information over a network...

CVE-2025-53783: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network...

CVE-2025-53779: Relative Path Traversal

Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

PT-2025-32795 · Microsoft · Windows Directx +1

Name of the Vulnerable Software and Affected Versions: Windows DirectX affected versions not specified Description: Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network. Recommendations: At the moment, there is no...

PT-2025-32742

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: Improper validation of syntactic correctness of input allows an unauthorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

CVE-2025-49759: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2025-32800

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: A race condition exists due to improper synchronization when using shared resources within the Windows Win32K - GRFX component. This allows an authorized attacker to elevate...

CVE-2025-53138: Use of Uninitialized Resource

Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information over a network...

CVE-2025-49758: Improper Privilege Management

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-50166: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network...

CVE-2025-50172: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network...