TheWindowsUpdate.com

Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-59494 Azure Monitor Agent Elevation of Privilege Vulnerability→

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-59221 Microsoft Word Remote Code Execution Vulnerability→

Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network. Continue reading CVE-2025-59295 Windows URL Parsing Remote Code Execution Vulnerability→

Information published. Continue reading CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability→

Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2025-59294 Windows Taskbar Live Preview Information Disclosure Vulnerability→

Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2025-59208 Windows MapUrlToZone Information Disclosure Vulnerability→

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability→

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally. Continue reading CVE-2025-59203 Windows State Repository API Server File Information Disclosure Vulnerability→