CVE-2025-26669: Out-of-bounds Read

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-21222: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

CVE-2025-21203: Buffer Over-read

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-21174: Uncontrolled Resource Consumption

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-27474: Use of Uninitialized Resource

Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-27470: Uncontrolled Resource Consumption

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-26687: Use After Free

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-26680: Uncontrolled Resource Consumption

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-29816: Acceptance of Extraneous Untrusted Data With Trusted Data

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network...

PT-2025-15530 · Microsoft · Streaming Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft Streaming Service affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an unauthorized attacker to deny service over a network. Recommendations: At the moment,...

KB5055570: Windows Server 2008 R2 Security Update (April 2025)

The remote Windows host is missing security update 5055570. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...

CVE-2025-29794: Improper Authorization

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-26686: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

DEBIAN-CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability...

CVE-2025-3329 Consumer Comanda Mobile Restaurant Order cleartext transmission

A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack...

CVE-2025-29815

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

CVE-2025-29815

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

CVE-2025-25000

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2025-25001: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25000: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...