CVE-2025-58734

CVE-2025-58734 is described as a use-after-free vulnerability in the Windows Inbox COM Objects that can allow a local attacker to achieve arbitrary code execution. The connected document from CNVD confirms that Inbox COM Objects contain a code execution vulnerability, supporting the CVE’s impact ...

CVE-2025-59259

CVE-2025-59259 affects Windows Local Session Manager (LSM) with an improper validation of input type, enabling an unauthenticated? authorized user to cause Denial of Service over a network. According to the CVE description and EUVD-2025-34370, the exploitability is network-based (AV:N, AC:L, PR:L...

CVE-2025-53143

CVE-2025-53143 is listed for Windows Message Queuing with high impact (CVSS 3.1: 8.8, Network, Privileges Low, User Interaction None). The entry indicates a remote code execution potential via resource type confusion. Connected sources confirm the vulnerability exists in MSMQ and note a network-e...

CVE-2025-53724

CVE-2025-53724 is a Windows Push Notifications vulnerability described as a type confusion that allows an authorized, locally authenticated attacker to elevate privileges. The CVE is linked to Windows Push Notifications and is rated with a base score of 7.8 (HIGH) via CVSS 3.1, with attack vector...

CVE-2025-53810

CVE-2025-53810 describes a type confusion vulnerability in Windows Defender Firewall Service that allows an authorized local attacker to escalate privileges. The connected NC SC/ENISA-style document confirms the affected component as Windows Defender Firewall Service and lists the impact as obtai...

CVE-2025-58735

CVE-2025-58735 is a Use-after-free vulnerability in Inbox COM Objects leading to local code execution. The base CVSS v3.1 score is 7.0 (HIGH) with LOCAL attackVector, HIGH impact on confidentiality/integrity/availability, and user interaction required. Connected MSKB/NCSC entries confirm a Window...

CVE-2025-58716

CVE-2025-58716 affects Microsoft Windows Speech and is caused by improper input validation, enabling an authorized attacker to perform local privilege escalation. The CVE is documented with a CVSS v3.1 base score of 8.8 (High) and LOCAL attack vector, requiring LOW privileges and no user interact...

CVE-2025-58732

CVE-2025-58732 is described as a use-after-free in Inbox COM Objects that enables local code execution. The Connected Documents provide broader Windows security updates (KBs and advisories) but do not specify a vendor/product remediation or a patch explicit to this CVE in the provided materials. ...

CVE-2025-49762

CVE-2025-49762 describes a race condition caused by concurrent access to a shared resource in the Windows Ancillary Function Driver for WinSock, enabling a locally authenticated attacker to escalate privileges. The description explicitly identifies the affected component and the impact as local p...

CVE-2025-53804

CVE-2025-53804 affects the Windows Kernel and involves exposure of sensitive information to an unauthorized actor, allowing local disclosure. The threat is categorized with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with low complexity, where privileges are low and no user i...

CVE-2025-55699

CVE-2025-55699 is listed in the connected NCSC MS security advisories as a Windows Kernel vulnerability with impact described as “Access to sensitive data.” The initial description also notes local disclosure exposure in Windows Kernel. The connected documents do not provide a root-cause detail, ...

CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2025-49761

CVE-2025-49761 is a Windows Kernel local privilege escalation (Use-after-free) vulnerability. The connected data confirms an effect: “Obtaining elevated privileges” with CVSS v3.1 base metrics indicating LOCAL, low attack complexity and privileges required, high impact to confidentiality/integrit...

CVE-2025-58739

CVE-2025-58739 affects Windows File Explorer and is described as the exposure of sensitive information to an unauthorized actor, enabling spoofing over a network. The CVSS 3.1 base score is 6.5 (Network, Low attack complexity, No privileges, User interaction required) with Confidentiality impact ...

CVE-2025-53135

CVE-2025-53135 is a race-condition based local privilege-escalation in the Windows DirectX graphics stack. Public description indicates concurrent execution on a shared resource allows an authorized, locally authenticated user to elevate privileges. The CVE is listed in Windows DirectX entries as...

CVE-2025-59209

CVE-2025-59209 is listed by NCSC as a vulnerability in Windows Push Notification Core that can lead to unauthorized disclosure of sensitive data locally. The advisory table assigns it a base impact of access to sensitive data (CVSS-like 5.5) with local attack vector. No specific patch/version rem...

CVE-2025-59187

CVE-2025-59187 corresponds to a Windows Kernel local privilege escalation described in EUVD-2025-34304 as due to improper input validation. The vulnerability affects the Windows Kernel with the potential for an authorized attacker to elevate privileges locally. The connected KB updates discuss Wi...

CVE-2025-55328

Vulnerability summary (CVE-2025-55328) : A race condition in Windows Hyper-V involving a shared resource can be exploited by an authorized local attacker to elevate privileges. The issue is categorized under Windows Hyper-V with a high impact (local, privilege escalation) and a high base score in...

CVE-2025-58729

CVE-2025-58729 affects Windows Local Session Manager (LSM). The connected documents confirm an issue with improper validation of input type in LSM, allowing an authorized attacker to cause a Denial of Service over the network . The CVSS vectors indicate network access, low attack complexity, and ...

CVE-2025-59205

CVE-2025-59205 is described as a race-condition vulnerability in the Microsoft Graphics Component caused by concurrent access to a shared resource, enabling an authorized local attacker to elevate privileges. The connected EUVD-2025-34293 entry reiterates the root cause and local privilege escala...

CVE-2025-55700

CVE-2025-55700 describes an out-of-bounds read in Windows Routing and Remote Access Service (RRAS) that enables an unauthenticated attacker to disclose information over the network. The Connected documents include a matching description (EUVD-2025-34409) but do not provide concrete technical deta...

CVE-2025-58725

CVE-2025-58725 is described in connected documents as a heap-based buffer overflow in Windows COM that allows a locally authenticated attacker to elevate privileges. The CVE is associated with Windows COM components, with a CVSS v3.1 score of 7.0 (Local, High impact, Privilege escalation) and Exp...

CVE-2025-55687

CVE-2025-55687 is a local privilege-escalation vulnerability in Windows Resilient File System (ReFS) caused by a race condition when concurrent access to a shared resource occurs with improper synchronization. The impact is local elevation of privileges. Public docs (NCSC advisory and EUVD summar...

CVE-2025-64680

CVE-2025-64680 affects Windows DWM Core Library. A heap-based buffer overflow allows an authorized, locally authenticated attacker to escalate privileges. The connected advisories/feeds confirm this CVE is part of Microsoft Windows vulnerability fixes and that Windows updates (KBs and security gu...

CVE-2025-62208

CVE-2025-62208 affects Windows License Manager. The issue involves insertion of sensitive information into a log file, enabling an authorized local attacker to disclose data. Impact is local information disclosure; CVSS from Microsoft indicates low access/privilege requirements with local access,...

CVE-2025-62209

CVE-2025-62209 concerns the Windows License Manager. The vulnerability involves insertion of sensitive information into a log file, which could allow an authorized local attacker to disclose sensitive information. The CVSS 3.1 metrics (local, low attack complexity, low privileges required) indica...