Month: September 2025

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-55316 Azure Arc Elevation of Privilege Vulnerability→

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-54106 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability→

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-55232 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability→

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Graphics Kernel allows an authorized attacker to execute code locally. Continue reading CVE-2025-55226 Graphics Kernel Remote Code Execution Vulnerability→

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-53798 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-54095 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-54096 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability→