CVE-2025-33052

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally...

CVE-2025-32712

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-33070

CVE-2025-33070 is reported in EU/NCSC context as affecting Windows Netlogon, caused by use of an uninitialized resource, enabling an unauthenticated attacker to obtain elevated privileges. The CVSS vector indicates network access is required with high impact on confidentiality, integrity, and ava...

CVE-2025-33070 Windows Netlogon Elevation of Privilege Vulnerability

...

CVE-2025-33068 Windows Standards-Based Storage Management Service Denial of Service Vulnerability

...

CVE-2025-33068 Windows Standards-Based Storage Management Service Denial of Service Vulnerability

...

CVE-2025-33057 Windows Local Security Authority (LSA) Denial of Service Vulnerability

...

CVE-2025-33055 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-33052 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2025-33052

CVE-2025-33052 is a local-information-disclosure in the Windows DWM Core Library caused by use of an uninitialized resource. In NVD, it’s rated CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; impact: confidentiality High. The Connected docs confirm affected component (Windows DWM Core Library) and...

CVE-2025-24065 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-24069

CVE-2025-24069 is an out-of-bounds read in the Windows Storage Management Provider that permits an authorized local attacker to disclose information. Affected component: Windows Storage Management Provider. CVSS: Local attack, Low privileges required, no user interaction, Confidentiality impact H...

CVE-2025-24068 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-24068 Windows Storage Management Provider Information Disclosure Vulnerability

...

CVE-2025-47962 Windows SDK Elevation of Privilege Vulnerability

...

CVE-2025-47955 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2025-47160 Windows Shortcut Files Security Feature Bypass Vulnerability

...

CVE-2025-47160

The CVE-2025-47160 entry applies to Windows Shell and describes a Protection mechanism failure that allows a remote attacker to bypass a security feature over the network. The NVD entry lists a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L), indicating a network-exposed issue w...

CVE-2025-47160 Windows Shortcut Files Security Feature Bypass Vulnerability

...

CVE-2025-33065

CVE-2025-33065 is an information-disclosure vulnerability: an out-of-bounds read in Windows Storage Management Provider could allow an authorized attacker (local access, low privileges) to disclose information. CVSS v3.1 base metrics indicate Local access, Low attack complexity, Privileges requir...