29364 matches found
CVE-2025-58720 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2025-59282 Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
...
CVE-2025-59282 Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
...
CVE-2025-59282
CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...
CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability
...
CVE-2025-59281
Xbox Gaming Services suffers an elevation of privilege via improper link resolution before file access ("link following"). An authorized local attacker can escalate to higher privileges. CVSSv3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, no user interaction. Remediation...
CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability
...
CVE-2025-59258 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
...
CVE-2025-59258 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
...
CVE-2025-59258
CVE-2025-59258 is an information-disclosure vulnerability affecting Windows Active Directory Federation Services (ADFS). The incident involves insertion of sensitive data into ADFS log files, enabling a local attacker to disclose information. The CVE is characterized in the provided data as a loc...
CVE-2025-59204 Windows Management Services Information Disclosure Vulnerability
...
CVE-2025-59204 Windows Management Services Information Disclosure Vulnerability
...
CVE-2025-59204
CVE-2025-59204 concerns Windows Management Services and is triggered by use of an uninitialized resource, leading to local information disclosure. The impact is confidentiality loss with local attack vector (required local access, no user interaction). The connected documents confirm Windows secu...
CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2025-59202
CVE-2025-59202 is a local privilege escalation via a use-after-free in Windows Remote Desktop Services. The Connected documents confirm affected component as Windows Remote Desktop Services and list the CVE with a high-severity context, but do not provide exploit details. No root-cause specifics ...
October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services
None None...
October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band
None None...
Windows Cryptographic Services Information Disclosure Vulnerability
Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...