4164 matches found
CVE-2025-27735 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
...
CVE-2025-27735
CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...
CVE-2025-26678 Windows Defender Application Control Security Feature Bypass Vulnerability
...
CVE-2025-26678 Windows Defender Application Control Security Feature Bypass Vulnerability
...
CVE-2025-26678
CVE-2025-26678 is a local security bypass in Windows Defender Application Control (WDAC) due to improper access control. The issue affects WDAC’s security feature and can be exploited locally to bypass protections. Public sources confirm the vulnerability and that updates released in April 2025 f...
CVE-2025-26637 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability
...
CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability
...
CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability
...
CVE-2025-29822
CVE-2025-29822 affects Microsoft OneNote (Office) with an incomplete input validation in OneNote that allows local security feature bypass. The issue is classified as high severity (CVSS 3.1: 7.8; Local attack, no privileges required, user interaction required; impacts Confidentiality, Integrity,...
CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability
...
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
Windows Hello Security Feature Bypass Vulnerability
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature over a network...
Windows Kerberos Security Feature Bypass Vulnerability
Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally...
Microsoft OneNote Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...
Description of the security update for OneNote 2016: April 8, 2025 (KB5002622)
None None...
Description of the security update for Office 2016: April 8, 2025 (KB5002573)
None None...
End of support for Office 2016 and Office 2019
None None...
PT-2025-15586 · Microsoft · Windows Kerberos +1
Name of the Vulnerable Software and Affected Versions: Windows Kerberos versions prior to April 2025 Patch Tuesday Description: A security-feature bypass vulnerability exists in Windows Kerberos due to insecure storage of sensitive information. Exploitation allows an authorized attacker to bypass...