Month: May 2025

Improper neutralization of special elements used in a command (‘command injection’) in Visual Studio allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-32702 Visual Studio Remote Code Execution Vulnerability→

Uncontrolled resource consumption in Windows LDAP – Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-29954 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability→

Heap-based buffer overflow in Windows Win32K – GRFX allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-30388 Windows Graphics Component Remote Code Execution Vulnerability→

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network. Continue reading CVE-2025-29842 UrlMon Security Feature Bypass Vulnerability→

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-29830 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Universal Print Management Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-29841 Universal Print Management Service Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-29962 Windows Media Remote Code Execution Vulnerability→

Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-29840 Windows Media Remote Code Execution Vulnerability→