Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-24059 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-24057 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-24056 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
CVE-2025-24055 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.
CVE-2025-24054 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-24051 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-24050 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-24049 1Microsoft 1Azure Command Line Interface Jun 17, 2026 Mar 11, 2025 N/A· v4 8.4 HIGH· v3 N/A· v2 Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.
CVE-2025-24048 1Microsoft 11Windows 10 1607 Windows 10 1809Windows 10 21h2+8 more Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-24046 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2025-24045 1Microsoft 6Windows Server 2012 Windows Server 2016Windows Server 2019+3 more Jun 17, 2026 Mar 11, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2025-24044 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-24043 1Microsoft 1Windbg Jun 17, 2026 Mar 11, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.
CVE-2025-24035 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2025-21247 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-21199 1Microsoft 1Azure Agent Jun 17, 2026 Mar 11, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-21180 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.
CVE-2025-26643 1Microsoft 1Edge Chromium Jun 17, 2026 Mar 7, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-24989 1Microsoft 1Power Pages Jun 17, 2026 Feb 19, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitiga...Show more An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.Show less
CVE-2025-21355 1Microsoft 1Bing Jun 17, 2026 Feb 19, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network

Previous 1...122123124...748 Next