Month: May 2025

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-29963 Windows Media Remote Code Execution Vulnerability→

External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-26684 Microsoft Defender Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability→

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-30385 Windows Common Log File System Driver Elevation of Privilege Vulnerability→

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2025-32707 NTFS Elevation of Privilege Vulnerability→

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-32704 Microsoft Excel Remote Code Execution Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-29979 Microsoft Excel Remote Code Execution Vulnerability→

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability→