Jump to content
Microsoft Windows Bulletin Board

Security

Microsoft Windows security board.

4825 topics in this forum

  1. Windows Security

    CVE-2025-26682 ASP.NET Core and Visual Studio Denial of Service Vulnerability

    by Windows Security
    • 0 replies
    • 44 views

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  2. Windows Security

    CVE-2025-24062 Microsoft DWM Core Library Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  3. Windows Security

    CVE-2025-24060 Microsoft DWM Core Library Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 5 views

    Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  4. Windows Security

    CVE-2025-20570 Visual Studio Code Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 4 views

    Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  5. Windows Security

    CVE-2025-29811 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 4 views

    Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  6. Windows Security

    CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.View the full article

    Windows Security
    Last reply by Windows Security,
  7. Windows Security

    CVE-2025-29816 Microsoft Word Security Feature Bypass Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  8. Windows Security

    CVE-2025-29812 DirectX Graphics Kernel Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 5 views

    Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  9. Windows Security

    CVE-2025-29810 Active Directory Domain Services Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  10. Windows Security

    CVE-2025-29805 Outlook for Android Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 5 views

    Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  11. Windows Security

    CVE-2025-29808 Windows Cryptographic Services Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.View the full article

    Windows Security
    Last reply by Windows Security,
  12. Windows Security

    CVE-2025-29809 Windows Kerberos Security Feature Bypass Vulnerability

    by Windows Security
    • 0 replies
    • 8 views

    Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.View the full article

    Windows Security
    Last reply by Windows Security,
  13. Windows Security

    CVE-2025-29804 Visual Studio Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 4 views

    Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  14. Windows Security

    CVE-2025-29801 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 4 views

    Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  15. Windows Security

    CVE-2025-29802 Visual Studio Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  16. Windows Security

    CVE-2025-29800 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  17. Windows Security

    CVE-2025-29803 Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 5 views

    Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  18. Windows Security

    CVE-2025-27739 Windows Kernel Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 5 views

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  19. Windows Security

    CVE-2025-27738 Windows Resilient File System (ReFS) Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 4 views

    Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  20. Windows Security

    CVE-2025-27737 Windows Security Zone Mapping Security Feature Bypass Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.View the full article

    Windows Security
    Last reply by Windows Security,
  21. Windows Security

    CVE-2025-27736 Windows Power Dependency Coordinator Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 5 views

    Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally.View the full article

    Windows Security
    Last reply by Windows Security,
  22. Windows Security

    CVE-2025-27735 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

    by Windows Security
    • 0 replies
    • 7 views

    Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.View the full article

    Windows Security
    Last reply by Windows Security,
  23. Windows Security

    CVE-2025-27733 NTFS Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 5 views

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  24. Windows Security

    CVE-2025-27732 Windows Graphics Component Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  25. Windows Security

    CVE-2025-27730 Windows Digital Media Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 6 views

    Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
×
×
  • Create New...