Jump to content
Microsoft Windows Bulletin Board

Security

Microsoft Windows security board.

4673 topics in this forum

  1. Windows Security

    CVE-2025-26634 Windows Core Messaging Elevation of Privileges Vulnerability

    by Windows Security
    • 0 replies
    • 4 views

    Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  2. Windows Security

    CVE-2025-26645 Remote Desktop Client Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  3. Windows Security

    CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.View the full article

    Windows Security
    Last reply by Windows Security,
  4. Windows Security

    CVE-2025-26631 Visual Studio Code Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  5. Windows Security

    CVE-2025-26630 Microsoft Access Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.View the full article

    Windows Security
    Last reply by Windows Security,
  6. Windows Security

    CVE-2025-26629 Microsoft Office Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.View the full article

    Windows Security
    Last reply by Windows Security,
  7. Windows Security

    CVE-2025-26627 Azure Arc Installer Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  8. Windows Security

    CVE-2025-24049 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  9. Windows Security

    CVE-2025-24994 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 4 views

    Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  10. Windows Security

    CVE-2025-24993 Windows NTFS Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.View the full article

    Windows Security
    Last reply by Windows Security,
  11. Windows Security

    CVE-2025-24992 Windows NTFS Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.View the full article

    Windows Security
    Last reply by Windows Security,
  12. Windows Security

    CVE-2025-24991 Windows NTFS Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.View the full article

    Windows Security
    Last reply by Windows Security,
  13. Windows Security

    CVE-2025-24985 Windows Fast FAT File System Driver Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.View the full article

    Windows Security
    Last reply by Windows Security,
  14. Windows Security

    CVE-2025-24984 Windows NTFS Information Disclosure Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.View the full article

    Windows Security
    Last reply by Windows Security,
  15. Windows Security

    CVE-2025-24983 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  16. Windows Security

    CVE-2025-24084 Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.View the full article

    Windows Security
    Last reply by Windows Security,
  17. Windows Security

    CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  18. Windows Security

    CVE-2025-24075 Microsoft Excel Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.View the full article

    Windows Security
    Last reply by Windows Security,
  19. Windows Security

    CVE-2025-24072 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 3 views

    Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  20. Windows Security

    CVE-2025-24071 Microsoft Windows File Explorer Spoofing Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  21. Windows Security

    CVE-2025-24067 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  22. Windows Security

    CVE-2025-24066 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
  23. Windows Security

    CVE-2025-24064 Windows Domain Name Service Remote Code Execution Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.View the full article

    Windows Security
    Last reply by Windows Security,
  24. Windows Security

    CVE-2025-24061 Windows Mark of the Web Security Feature Bypass Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.View the full article

    Windows Security
    Last reply by Windows Security,
  25. Windows Security

    CVE-2025-24059 Windows Common Log File System Driver Elevation of Privilege Vulnerability

    by Windows Security
    • 0 replies
    • 2 views

    Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.View the full article

    Windows Security
    Last reply by Windows Security,
×
×
  • Create New...