Month: May 2025

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability→

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-29959 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-29960 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-29964 Windows Media Remote Code Execution Vulnerability→

Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-29967 Remote Desktop Client Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-29966 Remote Desktop Client Remote Code Execution Vulnerability→

Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network. Continue reading CVE-2025-29969 MS-EVEN RPC Remote Code Execution Vulnerability→

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network. Continue reading CVE-2025-29968 Active Directory Certificate Services (AD CS) Denial of Service Vulnerability→