Page 3 of 409 results (0.002 seconds)

CVSS: 6.8EPSS: 0%CPEs: 26EXPL: 0

11 Mar 2025 — Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24987 • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0

11 Mar 2025 — Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24044 • CWE-416: Use After Free •

CVSS: 8.1EPSS: 0%CPEs: 26EXPL: 0

11 Mar 2025 — Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24035 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •

CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0

11 Feb 2025 — Windows Installer Elevation of Privilege Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows Installer service. By creating a symbolic link, an attacker can abuse the service to delete arbitrary files. An attacker can leverage this vulnerability to escalate p... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21373 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0

11 Feb 2025 — Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21181 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0

11 Feb 2025 — NTLM Hash Disclosure Spoofing Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21377 • CWE-73: External Control of File Name or Path •

CVSS: 10.0EPSS: 0%CPEs: 26EXPL: 0

11 Feb 2025 — Windows Telephony Service Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21371 • CWE-122: Heap-based Buffer Overflow •

CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0

11 Feb 2025 — Windows Kernel Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21359 • CWE-284: Improper Access Control •

CVSS: 5.9EPSS: 0%CPEs: 26EXPL: 0

11 Feb 2025 — Windows Kerberos Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21350 • CWE-20: Improper Input Validation •

CVSS: 6.0EPSS: 0%CPEs: 21EXPL: 0

11 Feb 2025 — Windows Deployment Services Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21347 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •