Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-53797 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Sep 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-53796 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Sep 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-49734 1Microsoft 13Powershell Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2025-49692 1Microsoft 1Azure Connected Machine Agent Jun 17, 2026 Sep 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-47997 1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 more Jun 17, 2026 Sep 9, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2025-53791 1Microsoft 1Edge Chromium Jun 17, 2026 Sep 5, 2025 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-55244 1Microsoft 1Azure Ai Bot Service Jun 17, 2026 Sep 4, 2025 N/A· v4 9.0 CRITICAL· v3 N/A· v2 Azure Bot Service Elevation of Privilege Vulnerability
CVE-2025-55242 1Microsoft 1Xbox Gaming Services Jun 17, 2026 Sep 4, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.
CVE-2025-55241 1Microsoft 1Entra Id Jun 17, 2026 Sep 4, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-55238 1Microsoft 1Dynamics 365 Jun 17, 2026 Sep 4, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
CVE-2025-54914 1Microsoft 1Azure Networking Jun 17, 2026 Sep 4, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure Networking Elevation of Privilege Vulnerability
CVE-2025-9491 1Microsoft 1Windows 11 23h2 Jun 17, 2026 Aug 26, 2025 4.6 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction i...Show more Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373.Show less
CVE-2025-55231 1Microsoft 5Windows Server 2012 Windows Server 2016Windows Server 2019+2 more Jun 17, 2026 Aug 21, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network.
CVE-2025-55230 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Aug 21, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
CVE-2025-55229 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Aug 21, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53795 1Microsoft 1Pc Manager Jun 17, 2026 Aug 21, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-53763 1Microsoft 1Purview Data Governance Jun 17, 2026 Aug 21, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-53793 1Microsoft 1Azure Stack Hub Jun 17, 2026 Aug 12, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
CVE-2025-53789 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Aug 12, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2025-53788 1Microsoft 1Windows Subsystem For Linux Jun 17, 2026 Aug 12, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Previous 1...929394...748 Next