CVE-2025-27485 Windows Standards-Based Storage Management Service Denial of Service Vulnerability

...

CVE-2025-21174

CVE-2025-21174 affects the Windows Standards-Based Storage Management Service. The vulnerability is a denial-of-service caused by uncontrolled resource consumption that an attacker can trigger over a network, with CVSS 3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5, HIGH). ...

CVE-2025-27478 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

...

CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2025-27472

CVE-2025-27472 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The initial description notes a protection mechanism failure that allows bypass over a network. Connected documents identify this CVE as an issue tracked by Microsoft with an official MSRC entry (MSRC CVE-2025...

CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2025-30670

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30671

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30671

CVE-2025-30671 affects Zoom Workplace Apps for Windows. The issue is a null pointer dereference that can allow an authenticated user to cause a denial of service over the network. Connected Nessus advisories note affected versions prior to 6.3.10 for Zoom Workplace Desktop/Client components and r...

CVE-2025-30671 Zoom Workplace Apps for Windows - Null Pointer

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30671 Zoom Workplace Apps for Windows - Null Pointer

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30670 Zoom Workplace Apps for Windows - Null Pointer

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-27443 Zoom Workplace Apps for Windows - Insecure Default Variable Initialization

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

CVE-2025-27443 Zoom Workplace Apps for Windows - Insecure Default Variable Initialization

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Kerberos Key Distribution Proxy Service Denial of Service Vulnerability

Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network...

Windows Mark of the Web Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature over a network...

Windows Kerberos Elevation of Privilege Vulnerability

Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...