Month: July 2025

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-47975 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability→

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-49695 Microsoft Office Remote Code Execution Vulnerability→

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2025-47973 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability→

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49685 Windows Search Service Elevation of Privilege Vulnerability→

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2025-49760 Windows Storage Spoofing Vulnerability→

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-49683 Microsoft Virtual Hard Disk Remote Code Execution Vulnerability→

Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally. Continue reading CVE-2025-49756 Office Developer Platform Security Feature Bypass Vulnerability→

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-49681 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→