CVE-2025-21325 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

The Elevation of Privilege – Windows Common Log File System Driver (CVE-2024-49138) has become more critical

The Elevation of Privilege - Windows Common Log File System Driver CVE-2024-49138 has become more critical. Just as I wrote that nothing had been heard about this vulnerability for a month since it was first published in Microsoft's December Patch Tuesday, a public exploit for it appeared on...

CVE-2025-0440

Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-21370

Windows Virtualization-Based Security VBS Enclave Elevation of Privilege Vulnerability...

CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability...

CVE-2025-21313

Windows Security Account Manager SAM Denial of Service Vulnerability...

CVE-2025-21313

Windows Security Account Manager SAM Denial of Service Vulnerability...

CVE-2025-21284

Windows Virtual Trusted Platform Module Denial of Service Vulnerability...

CVE-2025-21287

Windows Installer Elevation of Privilege Vulnerability...

CVE-2025-21278

Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...

CVE-2025-21269

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2025-21255

Windows Digital Media Elevation of Privilege Vulnerability...

CVE-2025-21227

Windows Digital Media Elevation of Privilege Vulnerability...

CVE-2025-21217

Windows NTLM Spoofing Vulnerability...

CVE-2025-21417

CVE-2025-21417 is a Windows Telephony Service remote code execution vulnerability. CIRCL confirms the CVE with a high impact (CVSS 8.80, Execute code) within Windows Telephony Service; CNVD describes a remote code execution vulnerability in Windows Telephony Server. Microsoft has public security ...

CVE-2025-21313 Windows Security Account Manager (SAM) Denial of Service Vulnerability

...

CVE-2025-21313 Windows Security Account Manager (SAM) Denial of Service Vulnerability

...

CVE-2025-21313

CVE-2025-21313 corresponds to a Windows SAM Denial-of-Service vulnerability. The connected sources identify the affected component as Windows Security Account Manager (SAM) and classify the impact as Denial of Service (DoS) with CVSS v3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Expl...

CVE-2025-21343

CVE-2025-21343 corresponds to a Windows Web Threat Defense User Service Information Disclosure vulnerability. Publicly observed exposure is that the Windows Web Threat Defense User Service can disclose sensitive data. The NCSC advisory lists CVE-2025-21343 with a base score of 7.5 (HIGH) and impa...

CVE-2025-21340 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

...