Category Archives: Republished Content

Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-47980 Windows Imaging Component Information Disclosure Vulnerability→

Improper link resolution before file access (‘link following’) in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49738 Microsoft PC Manager Elevation of Privilege Vulnerability→

Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network. Continue reading CVE-2025-49722 Windows Print Spooler Denial of Service Vulnerability→

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network. Continue reading CVE-2025-48802 Windows SMB Server Spoofing Vulnerability→

Improper link resolution before file access (‘link following’) in Windows Update Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability→

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49678 NTFS Elevation of Privilege Vulnerability→

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2025-48003 BitLocker Security Feature Bypass Vulnerability→

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2025-48818 BitLocker Security Feature Bypass Vulnerability→