Opinions, tips, and news orbiting Microsoft
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-53806 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54913 Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. Continue reading CVE-2025-53804 Windows Kernel-Mode Driver Information Disclosure Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54908 Microsoft PowerPoint Remote Code Execution Vulnerability
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53802 Windows Bluetooth Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54907 Microsoft Office Visio Remote Code Execution Vulnerability
No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-53800 Windows Graphics Component Elevation of Privilege Vulnerability
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54906 Microsoft Office Remote Code Execution Vulnerability