TheWindowsUpdate.com

Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network. Continue reading CVE-2025-59280 Windows SMB Client Tampering Vulnerability→

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Continue reading CVE-2025-58731 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability→

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability→

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. Continue reading CVE-2025-58729 Windows Local Session Manager (LSM) Denial of Service Vulnerability→

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. Continue reading CVE-2025-59259 Windows Local Session Manager (LSM) Denial of Service Vulnerability→

Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2025-58726 Windows SMB Server Elevation of Privilege Vulnerability→

Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally. Continue reading CVE-2025-59258 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability→

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. Continue reading CVE-2025-58724 Arc Enabled Servers – Azure Connected Machine Agent Elevation of Privilege Vulnerability→