CVE-2025-48814

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-47999

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...

CVE-2025-49740

CVE-2025-49740 is a protection mechanism failure in Windows Defender SmartScreen that can allow an unauthenticated attacker to bypass the SmartScreen protection over the network. This vulnerability affects the SmartScreen security feature in Windows and can lead to executing or delivering untrust...

CVE-2025-47999

CVE-2025-47999 : In Windows Hyper-V, missing synchronization allows an authorized attacker to cause a Denial-of-Service over an adjacent network. The CVSS v3.1 base score is 6.8 (AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Connected documents confirm Hyper-V is affected and describe DoS potential; expl...

EUVD-2025-20554

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-49681

No additional technical details are provided in the connected documents for CVE-2025-49681 beyond the description. Public information about affected software, root cause, impact, or fixes is not included; monitoring recommended.

CVE-2025-48823

CVE-2025-48823: Windows Cryptographic Services vulnerability allowing an unauthenticated network attacker to disclose information. Connected data lists CVSS v3.1 base score 5.9 (Medium) with Confidentiality Impact high and no listed impact on integrity/availability. The only explicit detail in so...

Microsoft Configuration Manager Remote Code Execution Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network...

Microsoft SQL Server Information Disclosure Vulnerability

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network...

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

Microsoft Teams Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

Windows SmartScreen Security Feature Bypass Vulnerability

Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

Windows GDI Information Disclosure Vulnerability

Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network...

CVE-2025-21427

CVE-2025-21427 is a Qualcomm closed‑source component vulnerability involving information disclosure during RTP payload decoding when a user equipment receives an RTP packet from the network. The root cause is described as a buffer over-read in the RTP payload decoding path, leading to potential l...

CVE-2025-41224

The CVE-2025-41224 entry applies to RUGGEDCOM devices running V5.X (all versions

Emerson ValveLink Products

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker with access to the system to read sensitive information stored in cleartext, tamper with parameters, and run un-authorized code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

PT-2025-28522 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to improper control of generation of code, also known as 'code injection', in Azure Monitor Agent. This allows an unauthorized attacker to execute code over...

PT-2025-28535 · Microsoft · Windows Smb +1

Name of the Vulnerable Software and Affected Versions: Windows SMB affected versions not specified Description: The issue concerns improper certificate validation, allowing an authorized attacker to perform spoofing over a network. This can be exploited by an attacker to impersonate a legitimate...

PT-2025-28531 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to an integer overflow or wraparound in Windows Hyper-V, which allows an authorized attacker to disclose information over an adjacent network. This can...