2376 matches found
CVE-2025-27473: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...
PT-2025-15544 · Microsoft · Windows Standards-Based Storage Management Service +1
Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service affected versions not specified Description: The issue is related to uncontrolled resource consumption in the Windows Standards-Based Storage Management Service, which allows an unauthorized...
PT-2025-15478 · Microsoft · Windows Standards-Based Storage Management Service +1
Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service affected versions not specified Description: The issue is related to uncontrolled resource consumption, allowing an unauthorized attacker to deny service over a network. This can lead to a...
CVE-2025-26641: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
CVE-2025-26682: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
KB5055527: Windows Server version 23H2 Security Update (April 2025)
The remote Windows host is missing security update 5055527. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...
PT-2025-15523
Name of the Vulnerable Software and Affected Versions: ASP.NET Core affected versions not specified Description: The issue allows an unauthorized attacker to deny service over a network due to the allocation of resources without limits or throttling. Recommendations: At the moment, there is no...
CVE-2025-29796
User interface ui misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-25001
CVE-2025-25001 affects Microsoft Edge (Chromium-based); the issue is an improper neutralization of input during web page generation (XSS) that enables spoofing over a network. Affected product: Microsoft Edge (Chromium-based), including Edge for iOS. Root cause: input handling during page generat...
PT-2025-14815 · Microsoft · Edge For Ios
Name of the Vulnerable Software and Affected Versions: Microsoft Edge for iOS affected versions not specified Description: The issue involves a user interface misrepresentation of critical information in Microsoft Edge for iOS, allowing an unauthorized attacker to perform spoofing over a network...
CVE-2025-26683
CVE-2025-26683 describes an improper authorization elevation of privilege in Microsoft Azure Playwright that can be exploited by an unauthenticated attacker over the network. Multiple sources consistently identify it as a network-based privilege-escalation issue affecting Azure Playwright, with t...
Microsoft Azure Playwright 授权问题漏洞
Microsoft Azure Playwright is an open source framework for automated web application testing from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Azure Playwright that stems from improper authorization and could allow an unauthorized attacker to elevate...
CVE-2024-8313 Default or Guessable SNMP community names in B&R APROL
An Exposure of Sensitive System Information to an Unauthorized Control Sphere and Initialization of a Resource with an Insecure Default vulnerability in the SNMP component of B&R APROL 4.4-00P5 may allow an unauthenticated adjacent-based attacker to read and alter configuration using SNMP...
CVE-2025-29806
No cwe for this issue in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2025-24996
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-24984
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...
CVE-2025-21180
Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally...
CVE-2025-24079
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...