Opinions, tips, and news orbiting Microsoft
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2025-48003 BitLocker Security Feature Bypass Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Continue reading CVE-2025-48818 BitLocker Security Feature Bypass Vulnerability
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-49675 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability
Improper link resolution before file access (‘link following’) in Visual Studio allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2025-49739 Visual Studio Elevation of Privilege Vulnerability
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally. Continue reading CVE-2025-49684 Windows Storage Port Driver Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-47987 Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-49674 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability