CVE-2025-27469

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2025-27470

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-26672

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-26671

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2025-26673

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2025-26668

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-26652

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-26642

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

CVE-2025-26642

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-26641

Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2025-21221

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

CVE-2025-21174

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-27739

CVE-2025-27739 is a Windows Kernel elevation-of-privilege flaw described as an untrusted pointer dereference that enables a locally authenticated attacker to obtain SYSTEM privileges (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8). Connected sources confirm this CVE is tracked under Win...

CVE-2025-27729

CVE-2025-27729 is a Windows Shell remote code execution issue described as a use-after-free vulnerability that enables local code execution. The linked sources confirm this affects Windows Shell and related components, with Microsoft providing security updates to remediate the flaw (for example K...

CVE-2025-27481

CVE-2025-27481 describes a stack-based buffer overflow in Windows Telephony Service that could allow a remote attacker to execute code over the network. The vulnerability affects the Windows Telephony Service component and is caused by a stack overflow in handling network input, with publicly pro...

CVE-2025-27480

CVE-2025-27480 is described as a Remote Desktop Services/RDP remote code execution vulnerability with a network attack vector (no user interaction) and a base CVSS v3.1 score of 8.1 (HIGH). Public references include a GitHub exploit claiming a remote code execution path and Krebs-style coverage p...

CVE-2025-27485

CVE-2025-27485 affects Windows Standards-Based Storage Management Service. The issue is uncontrolled resource consumption leading to network-based Denial of Service. CVSS 3.1 shows AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH) with network exploitation and no user interaction required. Con...

CVE-2025-26678

CVE-2025-26678 is a local security bypass in Windows Defender Application Control (WDAC) due to improper access control. The issue affects WDAC’s security feature and can be exploited locally to bypass protections. Public sources confirm the vulnerability and that updates released in April 2025 f...

CVE-2025-26673

CVE-2025-26673 is Windows LDAP (LDAP) Denial-of-Service. The connected data confirms that the LDAP service can be abused to exhaust resources and disable service over the network (DoS). Remediation, where provided, points to Microsoft security updates; update Windows to the April 2025 bundle (KB5...