Opinions, tips, and news orbiting Microsoft
Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network. Continue reading CVE-2025-24043 WinDbg Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-24057 Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-24077 Microsoft Word Remote Code Execution Vulnerability
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-24064 Windows Domain Name Service Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-24078 Microsoft Word Remote Code Execution Vulnerability
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-25003 Visual Studio Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-24072 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability