Month: March 2025

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-24066 Kernel Streaming Service Driver Elevation of Privilege Vulnerability→

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2025-24996 NTLM Hash Disclosure Spoofing Vulnerability→

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally. Continue reading CVE-2025-24061 Windows Mark of the Web Security Feature Bypass Vulnerability→

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-24995 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-24056 Windows Telephony Service Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-21180 Windows exFAT File System Remote Code Execution Vulnerability→

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability→

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack. Continue reading CVE-2025-24988 Windows USB Video Class System Driver Elevation of Privilege Vulnerability→