Opinions, tips, and news orbiting Microsoft
Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54111 Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-53806 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Graphics Kernel allows an authorized attacker to execute code locally. Continue reading CVE-2025-55226 Graphics Kernel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-54905 Microsoft Word Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Graphics Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-55223 DirectX Graphics Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-54097 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54899 Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-54902 Microsoft Excel Remote Code Execution Vulnerability