Opinions, tips, and news orbiting Microsoft
Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. Continue reading CVE-2025-53805 HTTP.sys Denial of Service Vulnerability
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-53797 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-54901 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-54097 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54895 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-54905 Microsoft Word Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-54093 Windows TCP/IP Driver Elevation of Privilege Vulnerability