CVE-2025-26686 Windows TCP/IP Remote Code Execution Vulnerability

...

CVE-2025-26681 Win32k Elevation of Privilege Vulnerability

...

CVE-2025-26681

CVE-2025-26681 is a local elevation-of-privilege vulnerability in Windows Win32K GRFX caused by a use-after-free. Affected component: Win32K Graphics Subsystem (GRFX). Impact: local attacker could obtain elevated privileges. The CVE is addressed by Microsoft security updates in April 2025 (e.g., ...

CVE-2025-26668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2025-26665 Windows upnphost.dll Elevation of Privilege Vulnerability

...

CVE-2025-26665

CVE-2025-26665 affects Windows UPnP Device Host (upnphost.dll). The issue is described as sensitive data stored in memory that is not properly locked, enabling a local attacker with authorized access to obtain increased entitlements (privilege escalation). Connected sources corroborate the impact...

CVE-2025-26665 Windows upnphost.dll Elevation of Privilege Vulnerability

...

CVE-2025-30670

Summary of CVE-2025-30670 : The issue is a null pointer dereference in Zoom Workplace Apps for Windows that can allow an authenticated user to cause a denial of service over the network. Connected documents specify affected products as Zoom Workplace Desktop App and Zoom Client for Meetings, with...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

Windows upnphost.dll Elevation of Privilege Vulnerability

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally...

Windows TCP/IP Remote Code Execution Vulnerability

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

PT-2025-15560 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to improper input validation in Windows Security Zone Mapping, which allows an unauthorized attacker to bypass a security feature locally. Recommendations: At the momen...

Microsoft Windows UPnP 安全漏洞

Microsoft Windows UPnP is a device agent from Microsoft Corporation USA. Providing a proxy allows a Windows network connection to recognize the IP address of the ZoneDirector. A security vulnerability exists in Microsoft Windows UPnP. An attacker could exploit the vulnerability to elevate...

PT-2025-15531 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature over a network. This issue enables attackers to affect the system...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

Zoom Workplace 代码问题漏洞

Zoom Workplace Apps for Windows is the official suite of collaboration tools from Zoom, including core features such as team chat, whiteboards, notes, and more, available through a Zoom Meetings account. A null pointer dereference vulnerability exists in Zoom Workplace Apps for Windows, which can...

PT-2025-15489 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to elevate privileges locally. This can affect the system, potentially leading to...

PT-2025-15515 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol LDAP affected versions not specified Description: An uncontrolled resource consumption issue in Windows Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to cause a denial...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass certain features. The following products and editions are...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could bypass certain features. The following products and editions are affected:Windows 10 for 32-bit...