CVSS: 7.0EPSS: 0%CPEs: 22EXPL: 0CVE-2025-58733 – Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-58733
14 Oct 2025 — Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58733 • CWE-416: Use After Free •
CVSS: 7.0EPSS: 0%CPEs: 20EXPL: 0CVE-2025-58730 – Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-58730
14 Oct 2025 — Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58730 • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 22EXPL: 0CVE-2025-59295 – Windows URL Parsing Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-59295
14 Oct 2025 — Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59295 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0CVE-2025-59242 – Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2025-59242
14 Oct 2025 — Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59242 • CWE-122: Heap-based Buffer Overflow CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0CVE-2025-59201 – Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2025-59201
14 Oct 2025 — Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59201 • CWE-284: Improper Access Control •
CVSS: 7.0EPSS: 0%CPEs: 22EXPL: 0CVE-2025-58735 – Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-58735
14 Oct 2025 — Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58735 • CWE-416: Use After Free •
CVSS: 7.0EPSS: 0%CPEs: 20EXPL: 0CVE-2025-58732 – Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-58732
14 Oct 2025 — Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58732 • CWE-416: Use After Free •
CVSS: 7.8EPSS: 2%CPEs: 18EXPL: 0CVE-2025-24990 – Microsoft Windows Untrusted Pointer Dereference Vulnerability
https://notcve.org/view.php?id=CVE-2025-24990
14 Oct 2025 — Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware. Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vul... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990 • CWE-822: Untrusted Pointer Dereference •
CVSS: 10.0EPSS: 0%CPEs: 21EXPL: 0CVE-2025-55234 – Windows SMB Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2025-55234
09 Sep 2025 — SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to ... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55234 • CWE-287: Improper Authentication •
CVSS: 5.0EPSS: 0%CPEs: 21EXPL: 0CVE-2025-54917 – MapUrlToZone Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2025-54917
09 Sep 2025 — Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54917 • CWE-693: Protection Mechanism Failure •