Month: August 2025

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2025-50154 Microsoft Windows File Explorer Spoofing Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Win32K – GRFX allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2025-53132 Win32k Elevation of Privilege Vulnerability→

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-50153 Desktop Windows Manager Elevation of Privilege Vulnerability→

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-50177 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49762 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-50173 Windows Installer Elevation of Privilege Vulnerability→

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49761 Windows Kernel Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in an sql command (‘sql injection’) in SQL Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2025-47954 Microsoft SQL Server Elevation of Privilege Vulnerability→