Month: June 2025

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-32711 M365 Copilot Information Disclosure Vulnerability→

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-33056 Windows Local Security Authority (LSA) Denial of Service Vulnerability→

Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-33050 DHCP Server Service Denial of Service Vulnerability→

Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-32725 DHCP Server Service Denial of Service Vulnerability→

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. Continue reading CVE-2025-24065 Windows Storage Management Provider Information Disclosure Vulnerability→

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. Continue reading CVE-2025-24069 Windows Storage Management Provider Information Disclosure Vulnerability→

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. Continue reading CVE-2025-24068 Windows Storage Management Provider Information Disclosure Vulnerability→

Microsoft is announcing the availability of the security updates for Microsoft Office 365. Customers running Office 365 should log in ensure you have the latest update to be protected from this vulnerability. See the [Release Notes](https://learn.micro… Continue reading CVE-2025-32717 Microsoft Word Remote Code Execution Vulnerability→