CVE-2025-49721

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally...

CVE-2025-49711

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-49700

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-49699

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-49691

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network...

CVE-2025-49688

Double free in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-49676

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-48824

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

CVE-2025-48822

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally...

CVE-2025-48812

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2025-48817

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2025-48804

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-47988

Improper control of generation of code 'code injection' in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network...

CVE-2025-49740

CVE-2025-49740 is a protection mechanism failure in Windows Defender SmartScreen that can allow an unauthenticated attacker to bypass the SmartScreen protection over the network. This vulnerability affects the SmartScreen security feature in Windows and can lead to executing or delivering untrust...

CVE-2025-48804

CVE-2025-48804 : Windows BitLocker is affected by a security feature bypass through acceptance of extraneous untrusted data with trusted data, enabling a physical attacker to bypass protections. The connected Microsoft-related documents indicate that Microsoft released security updates addressing...

CVE-2025-47981

CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...

CVE-2025-49676

CVE-2025-49676: heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) over network; initial description provides this; connected documents do not add concrete technical details (affected products/versions, root cause, fix). Monitor for updates.

CVE-2025-49657

Technical details about CVE-2025-49657 are not provided in the connected documents. The Initial description notes a heap-based buffer overflow in RRAS, but no affected versions, root cause specifics, impact scope, or remediation are included here; monitor for updates.

Windows Netlogon Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network...

Remote Desktop Spoofing Vulnerability

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...