Month: July 2025

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49726 Windows Notification Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Workspace Broker allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49665 Workspace Broker Elevation of Privilege Vulnerability→

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally. Continue reading CVE-2025-49723 Windows StateRepository API Server file Tampering Vulnerability→

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-49663 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2025-49721 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability→

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49659 Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability→

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-49719 Microsoft SQL Server Information Disclosure Vulnerability→

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-48822 Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability→