CVE-2025-59204

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally...

CVE-2025-59204

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally...

CVE-2025-59202

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2025-59193

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2025-59193

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2025-58720

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2025-58720

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

...

CVE-2025-59287

CVE-2025-59287 is a deserialization vulnerability in Windows Server Update Services (WSUS) that enables unauthenticated, remote code execution over the network via crafted data (notably SOAP requests to WSUS endpoints such as Client.asmx). Connected exploit analyses confirm the root cause as unsa...

CVE-2025-59193 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2025-59193 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2025-59193

CVE-2025-59193 describes a race condition in Windows Management Services (a Windows component) where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The description in the CVE notes local, privilege-escalation impact due to improper synchronizatio...

CVE-2025-58720 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2025-58720

CVE-2025-58720 (Windows Cryptographic Services) has concrete details in connected docs. The vulnerability arises from using a cryptographic primitive with a risky implementation in Windows Cryptographic Services, enabling an authenticated local attacker to disclose information. The vulnerability ...

CVE-2025-58720 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2025-59282 Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

...

CVE-2025-59282 Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

...

CVE-2025-59282

CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...

CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability

...

CVE-2025-59281

Xbox Gaming Services suffers an elevation of privilege via improper link resolution before file access ("link following"). An authorized local attacker can escalate to higher privileges. CVSSv3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, no user interaction. Remediation...