CVE-2025-21315 – Microsoft Brokering File System Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2025-21315
14 Jan 2025 — Microsoft Brokering File System Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21315 • CWE-416: Use After Free •
CVE-2025-21314 – Windows SmartScreen Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2025-21314
14 Jan 2025 — Windows SmartScreen Spoofing Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21314 • CWE-451: User Interface (UI) Misrepresentation of Critical Information •
CVE-2025-21306 – Windows Telephony Service Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-21306
14 Jan 2025 — Windows Telephony Service Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21306 • CWE-122: Heap-based Buffer Overflow •
CVE-2025-21303 – Windows Telephony Service Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-21303
14 Jan 2025 — Windows Telephony Service Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21303 • CWE-122: Heap-based Buffer Overflow •
CVE-2025-21302 – Windows Telephony Service Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-21302
14 Jan 2025 — Windows Telephony Service Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21302 • CWE-122: Heap-based Buffer Overflow •
CVE-2025-21301 – Windows Geolocation Service Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2025-21301
14 Jan 2025 — Windows Geolocation Service Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21301 • CWE-284: Improper Access Control •
CVE-2025-21299 – Windows Kerberos Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2025-21299
14 Jan 2025 — Windows Kerberos Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21299 • CWE-922: Insecure Storage of Sensitive Information •
CVE-2025-21298 – Windows OLE Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-21298
14 Jan 2025 — Windows OLE Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RTF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage t... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21298 • CWE-416: Use After Free •
CVE-2025-21296 – BranchCache Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-21296
14 Jan 2025 — BranchCache Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21296 • CWE-416: Use After Free •
CVE-2025-21295 – SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2025-21295
14 Jan 2025 — SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21295 • CWE-416: Use After Free •