Month: August 2025

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2025-25006 Microsoft Exchange Server Spoofing Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53147 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. Continue reading CVE-2025-25005 Microsoft Exchange Server Tampering Vulnerability→

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53142 Microsoft Brokering File System Elevation of Privilege Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53137 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network. Continue reading CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability→

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53133 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-53773 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability→