CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability

...

CVE-2025-59258 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

...

CVE-2025-59258 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

...

CVE-2025-59258

CVE-2025-59258 is an information-disclosure vulnerability affecting Windows Active Directory Federation Services (ADFS). The incident involves insertion of sensitive data into ADFS log files, enabling a local attacker to disclose information. The CVE is characterized in the provided data as a loc...

CVE-2025-59204 Windows Management Services Information Disclosure Vulnerability

...

CVE-2025-59204

CVE-2025-59204 concerns Windows Management Services and is triggered by use of an uninitialized resource, leading to local information disclosure. The impact is confidentiality loss with local attack vector (required local access, no user interaction). The connected documents confirm Windows secu...

CVE-2025-59204 Windows Management Services Information Disclosure Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59202

CVE-2025-59202 is a local privilege escalation via a use-after-free in Windows Remote Desktop Services. The Connected documents confirm affected component as Windows Remote Desktop Services and list the CVE with a high-severity context, but do not provide exploit details. No root-cause specifics ...

Windows Cryptographic Services Information Disclosure Vulnerability

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band

October 23, 2025—KB5070883 OS Build 17763.7922 Out-of-band Applies To Windows Server 2019 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business...

October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services

October 24, 2025—KB5070892 OS Build 20348.4297 Security Update for Windows Server Update Services Applies To Windows Server 2022 Datacenter: Azure Edition Note Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in...

Xbox Gaming Services Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally...

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

October 24, 2025—KB5070893 (OS Build 26100.6905) Security Update for Windows Server Update Services

October 24, 2025—KB5070893 OS Build 26100.6905 Security Update for Windows Server Update Services Applies To Windows Server 2025 Datacenter: Azure Edition Note Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in...

October 23, 2025—KB5070881 (OS Build 26100.6905) Out-of-band

October 23, 2025—KB5070881 OS Build 26100.6905 Out-of-band Applies To Windows Server 2025, all editions Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and busine...

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...