Month: September 2025

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54911 Windows BitLocker Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54109 Windows Defender Firewall Service Elevation of Privilege Vulnerability→

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-54901 Microsoft Excel Information Disclosure Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54108 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54900 Microsoft Excel Remote Code Execution Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54094 Windows Defender Firewall Service Elevation of Privilege Vulnerability→

Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54098 Windows Hyper-V Elevation of Privilege Vulnerability→

Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally. Continue reading CVE-2025-54103 Windows Management Service Elevation of Privilege Vulnerability→