Category Archives: Republished Content

Improper link resolution before file access (‘link following’) in Windows Performance Recorder allows an authorized attacker to deny service locally. Continue reading CVE-2025-49680 Windows Performance Recorder (WPR) Denial of Service Vulnerability→

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network. Continue reading CVE-2025-48819 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability→

Access of resource using incompatible type (‘type confusion’) in Microsoft Office allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-49702 Microsoft Office Remote Code Execution Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. Continue reading CVE-2025-48808 Windows Kernel Information Disclosure Vulnerability→

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-49663 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability→

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49685 Windows Search Service Elevation of Privilege Vulnerability→

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-49724 Windows Connected Devices Platform Service Remote Code Execution Vulnerability→

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49744 Windows Graphics Component Elevation of Privilege Vulnerability→