Source: msrc

Windows Search Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49685

Windows Secure Kernel Mode Information Disclosure Vulnerability

2025-07-08 CVE-2025-48809

Windows Secure Kernel Mode Information Disclosure Vulnerability

2025-07-08 CVE-2025-48810

Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49666

Windows Shell Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49679

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47975

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47976

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48815

Windows SmartScreen Security Feature Bypass Vulnerability

2025-07-08 CVE-2025-49740

Windows SMB Server Spoofing Vulnerability

2025-07-08 CVE-2025-48802

Windows StateRepository API Server file Tampering Vulnerability

2025-07-08 CVE-2025-49723

Windows Storage Port Driver Information Disclosure Vulnerability

2025-07-08 CVE-2025-49684

Windows Storage Spoofing Vulnerability

2025-07-08 CVE-2025-49760

lowMicrosoft MSRC 2025-W28

Windows Storage VSP Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47982

Windows TCP/IP Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49686

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49659

Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability

2025-07-08 CVE-2025-49658

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48819

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48821

Windows Update Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48799

Windows User-Mode Driver Framework Host Information Disclosure Vulnerability

2025-07-08 CVE-2025-49664

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47159

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48803

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48811

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49667

Workspace Broker Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49665

x86/iopl: Cure TIF_IO_BITMAP inconsistencies

2025-07-08 CVE-2025-38100

x86/sgx: Prevent attempts to reclaim poisoned pages

2025-07-08 CVE-2025-38334

accel/qaic: Fix integer overflow in qaic_validate_req()

2025-04-08 CVE-2025-22001

acpi: nfit: fix narrowing conversion in acpi_nfit_ctl

2025-04-08 CVE-2025-22044

Active Directory Certificate Services Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-27740

Active Directory Domain Services Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29810

An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting s

2025-04-08 CVE-2025-3277

criticalMicrosoft MSRC 2025-W15

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

2025-04-08 CVE-2025-29478

lowMicrosoft MSRC 2025-W15

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

2025-04-08 CVE-2025-29477

lowMicrosoft MSRC 2025-W15

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

2025-04-08 CVE-2024-52981

arcnet: Add NULL check in com20020pci_probe()

2025-04-08 CVE-2025-22054

arm64: Don't call NULL in do_compat_alignment_fixup()

2025-04-08 CVE-2025-22033

ASoC: codecs: wcd938x: fix incorrect used of portid

2025-04-08 CVE-2022-48716

criticalMicrosoft MSRC 2025-W15

ASoC: imx-card: Add NULL check in imx_card_probe()

2025-04-08 CVE-2025-22066

ASP.NET Core and Visual Studio Denial of Service Vulnerability

2025-04-08 CVE-2025-26682

atm: Fix NULL pointer dereference

2025-04-08 CVE-2025-22018

ax25: Remove broken autobind

2025-04-08 CVE-2025-22109

Azure AI Bot Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-30392

criticalMicrosoft MSRC 2025-W15

Azure Bot Framework SDK Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-30389

Azure Functions Remote Code Execution Vulnerability

2025-04-08 CVE-2025-33074

Azure Local Cluster Information Disclosure Vulnerability

2025-04-08 CVE-2025-25002

Azure Local Cluster Information Disclosure Vulnerability

2025-04-08 CVE-2025-26628

Azure Local Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-27489

Azure ML Compute Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-30390

criticalMicrosoft MSRC 2025-W15

Azure Virtual Desktop Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-21416

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()

2025-04-08 CVE-2025-21936

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()

2025-04-08 CVE-2025-21937

Bluetooth: btnxpuart: Fix kernel panic during FW release

2025-04-08 CVE-2025-22102

Bluetooth: Fix error code in chan_alloc_skb_cb()

2025-04-08 CVE-2025-22007

Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

2025-04-08 CVE-2025-21969

bnxt_en: Mask the bd_cnt field in the TX BD properly

2025-04-08 CVE-2025-22108

bonding: check xdp prog when set bond mode

2025-04-08 CVE-2025-22105

btrfs: fix block group refcount race in btrfs_create_pending_block_groups()

2025-04-08 CVE-2025-22115