CVE-2025-6741

CVE-2025-6741 describes improper access control in the Devolutions Server secure message component, enabling an authenticated user to steal unauthorized entries via the secure message entry attachment feature. Affected are Devolutions Server 2025.2.2.0–2025.2.4.0 and 2025.1.11.0 and earlier. Root...

Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent Access

Cybersecurity researchers have disclosed what they say is a "critical design flaw" in delegated Managed Service Accounts dMSAs introduced in Windows Server 2025. "The flaw can result in high-impact attacks, enabling cross-domain lateral movement and persistent access to all managed service accoun...

Microsoft Windows Kerberos 缓冲区错误漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed with the goal of providing strong authentication services to client/server applications through a key system. A buffer...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affected: Windows...

Microsoft Windows Media 安全漏洞

Microsoft Windows Media is a series of media playback and management software from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Media. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are affected: Window...

Microsoft Win32k 资源管理错误漏洞

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Win32k. An attacker exploiting this vulnerability could elevate privileges. The following products and versions are affected:Windows...

Microsoft Windows SSDP 资源管理错误漏洞

Microsoft Windows SSDP is a simple service discovery provider program from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows SSDP. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

Microsoft Hyper-V 输入验证错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...

Microsoft Windows Event Tracing 资源管理错误漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism to track and log events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to a resource management error. An attacker could exploit the...

Microsoft Windows Routing and Remote Access Service 缓冲区错误漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A buffer error vulnerability exists in Microsoft Windows Routing and Remote...

Microsoft Windows Fast Fat Driver 安全漏洞

Microsoft Windows Fast Fat Driver is a complete file system from Microsoft USA that solves a variety of problems such as storing data on disk, interacting with a cache manager, and handling a variety of I/O operations such as file creation, performing reads/writes to files, setting file...

Microsoft Windows Storage Port Driver 安全漏洞

Microsoft Windows Storage Port Driver is a system-supplied storage port driver from Microsoft USA that is especially suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. A security vulnerability exists in the Microsoft Windows Storage Port Driver. A...

Microsoft Windows Remote Desktop Licensing Service 访问控制错误漏洞

Microsoft Windows Remote Desktop Licensing Service is an authorization license from Microsoft Corporation USA that manages and authenticates remote desktop connections. An access control error vulnerability exists in Microsoft Windows Remote Desktop Licensing Service. An attacker could bypass...

Microsoft Windows Cryptographic Services 安全漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could gain access to sensitive information. The following...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windows Server...

Microsoft Hyper-V 安全漏洞

Microsoft Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. An attacker has exploited the vulnerability to cause a denial of service on the system. The following...

May 13, 2025—Hotpatch KB5058497 (OS Build 26100.3981)

None None...

June 10, 2025—Hotpatch KB5060841 (OS Build 26100.4270)

None None...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Storage Management Provider. An attacker exploiting this vulnerability could gain access to sensitive information. The following...

Microsoft Windows Hello 信息泄露漏洞

Microsoft Windows Hello is a biometric-based login from Microsoft Corporation USA that allows you to sign in using your face, fingerprint or PIN. An information disclosure vulnerability exists in Microsoft Windows Hello. The following products and versions are affected: Windows 11 Version 22H2 fo...