CVE-2025-21199

Azure Agent Installer for Backup and Site Recovery is affected by CVE-2025-21199 due to improper privilege management, allowing an authorized attacker to elevate privileges locally. The issue targets the Azure Agent Installer component used for disaster recovery, with a CVSSv3.1 base score of 6.7...

CVE-2025-24996

CVE-2025-24996 : Affects Windows NTLM. External control of a file name or path enables an unauthorized network spoofing scenario, potentially allowing impersonation over a network. CVSSv3.1 base 6.5 (Network attack, low complexity, no privileges required, user interaction required; CIA: high conf...

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-24082

CVE-2025-24082 is a Microsoft Excel remote code execution vulnerability described as a use-after-free in Excel that can allow a local attacker to run arbitrary code. The CVE is confirmed by Microsoft’s MSRC entry (Microsoft Excel Remote Code Execution Vulnerability) and is referenced alongside re...

CVE-2025-24079

CVE-2025-24079 is a use-after-free vulnerability in Microsoft Word (Office) that allows a local attacker to execute code on a vulnerable system. The issue affects Word components and is triggered by a crafted input/application behavior, with CVSS 3.1 scoring a base 7.8 (High) and an attack vector...

CVE-2025-24077

CVE-2025-24077 is a Microsoft Word use-after-free vulnerability that enables a local attacker to execute code on affected systems. The weakness resides in Word/Office components and, per the sources, can lead to arbitrary code execution with high impact (CVE-2025-24077). Affected products include...

CVE-2025-1434

CVE-2025-1434 describes an XSS vulnerability in the Spreadsheet view of Areal Topkapi Vision Webserv2. The weakness allows a remote, unauthenticated attacker to read a limited amount of values or perform a denial-of-service (DoS) on the affected spreadsheet. Disclosure of secrets or other system ...

MapUrlToZone Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

Windows Telephony Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network...

Microsoft Management Console Security Feature Bypass Vulnerability

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...

Windows NTFS Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

PT-2025-10812 · Unknown +1 · Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server 2019 version 10.0.17763.0 Description: The issue is related to a use after free vulnerability in the DNS Server, which allows an unauthorized attacker to execute code over a network. This can enable remote attackers to execute...

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...