Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-53805 1Microsoft 6Windows 11 22h2 Windows 11 23h2Windows 11 24h2+3 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2025-53804 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Sep 9, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53803 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Sep 9, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53802 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 22h2+5 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53801 1Microsoft 11Windows 10 1507 Windows 10 1607Windows 10 1809+8 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.
CVE-2025-53800 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-53799 1Microsoft 17365 Copilot OfficeWindows 10 1507+14 more Jun 17, 2026 Sep 9, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
CVE-2025-53798 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Sep 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-53797 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Sep 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-53796 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Sep 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-49734 1Microsoft 13Powershell Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Sep 9, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2025-49692 1Microsoft 1Azure Connected Machine Agent Oct 1, 2026 Sep 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-47997 1Microsoft 4Sql Server 2016 Sql Server 2017Sql Server 2019+1 more Jun 17, 2026 Sep 9, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2025-53791 1Microsoft 1Edge Chromium Jun 17, 2026 Sep 5, 2025 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-55244 1Microsoft 1Azure Ai Bot Service Jun 17, 2026 Sep 4, 2025 N/A· v4 9.0 CRITICAL· v3 N/A· v2 Azure Bot Service Elevation of Privilege Vulnerability
CVE-2025-55242 1Microsoft 1Xbox Gaming Services Sep 30, 2026 Sep 4, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.
CVE-2025-55241 1Microsoft 1Entra Id Oct 18, 2026 Sep 4, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-55238 1Microsoft 1Dynamics 365 Jun 17, 2026 Sep 4, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
CVE-2025-54914 1Microsoft 1Azure Networking Oct 18, 2026 Sep 4, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure Networking Elevation of Privilege Vulnerability
CVE-2025-9491 1Microsoft 1Windows 11 23h2 Jun 17, 2026 Aug 26, 2025 4.6 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction i...Show more Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373.Show less

Previous 1...235236237...892 Next