Month: April 2025

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-27476 Windows Digital Media Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Secure Channel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-26649 Windows Secure Channel Elevation of Privilege Vulnerability→

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-27474 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-26640 Windows Digital Media Elevation of Privilege Vulnerability→

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability→

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability→

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-27473 HTTP.sys Denial of Service Vulnerability→

Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-29801 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability→