Week: 2025-W28

500 advisories • Updated 2026-04-12

Windows Storage VSP Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47982

highMicrosoft MSRC 2025-W28

Windows TCP/IP Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49686

highMicrosoft MSRC 2025-W28

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49659

highMicrosoft MSRC 2025-W28

Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability

2025-07-08 CVE-2025-49658

mediumMicrosoft MSRC 2025-W28

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48819

highMicrosoft MSRC 2025-W28

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48821

highMicrosoft MSRC 2025-W28

Windows Update Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48799

highMicrosoft MSRC 2025-W28

Windows User-Mode Driver Framework Host Information Disclosure Vulnerability

2025-07-08 CVE-2025-49664

mediumMicrosoft MSRC 2025-W28

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47159

highMicrosoft MSRC 2025-W28

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48803

mediumMicrosoft MSRC 2025-W28

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48811

mediumMicrosoft MSRC 2025-W28

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49667

highMicrosoft MSRC 2025-W28

Workspace Broker Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49665

highMicrosoft MSRC 2025-W28

x86/iopl: Cure TIF_IO_BITMAP inconsistencies

2025-07-08 CVE-2025-38100

highMicrosoft MSRC 2025-W28

x86/sgx: Prevent attempts to reclaim poisoned pages

2025-07-08 CVE-2025-38334

mediumMicrosoft MSRC 2025-W28

cURL: Schwachstelle ermöglicht Offenlegung von Informationen

2025-07-07 CVE-2024-0853

mediumBSI 2025-W28

Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

2025-07-07 CVE-2014-3931

highLooking Glass CVE 2025-W28

PHPMailer Command Injection Vulnerability

2025-07-07 CVE-2016-10033

highPHP CVE 2025-W28

Rails Ruby on Rails Path Traversal Vulnerability

2025-07-07 CVE-2019-5418

highRails CVE 2025-W28

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

2025-07-07 CVE-2019-9621

highSynacor CVE 2025-W28