Security Warnings — Vendor: microsoft

Microsoft Excel Information Disclosure Vulnerability

2025-11-11 CVE-2025-60728

mediumMicrosoft MSRC 2025-W46

Microsoft Excel Information Disclosure Vulnerability

2025-11-11 CVE-2025-62202

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-60727

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62200

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62201

highMicrosoft MSRC 2025-W46

Microsoft Excel Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62203

highMicrosoft MSRC 2025-W46

Microsoft Office Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62199

highMicrosoft MSRC 2025-W46

Microsoft Office Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62205

highMicrosoft MSRC 2025-W46

Microsoft Office Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62216

highMicrosoft MSRC 2025-W46

Microsoft OneDrive for Android Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60722

mediumMicrosoft MSRC 2025-W46

Microsoft SharePoint Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62204

highMicrosoft MSRC 2025-W46

Microsoft SQL Server Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59499

highMicrosoft MSRC 2025-W46

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59514

highMicrosoft MSRC 2025-W46

Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

2025-11-11 CVE-2025-62449

mediumMicrosoft MSRC 2025-W46

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62218

highMicrosoft MSRC 2025-W46

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62219

highMicrosoft MSRC 2025-W46

missing SFTP host verification with wolfSSH

2025-11-11 CVE-2025-10966

mediumMicrosoft MSRC 2025-W46

mount: handle NULL values in mnt_ns_release()

2025-11-11 CVE-2025-40195

mediumMicrosoft MSRC 2025-W46

mruby array.c ary_fill_exec out-of-bounds write

2025-11-11 CVE-2025-12875

mediumMicrosoft MSRC 2025-W46

mruby array.c sort_cmp use after free

2025-11-11 CVE-2025-13120

mediumMicrosoft MSRC 2025-W46

Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60707

highMicrosoft MSRC 2025-W46

net: use dst_dev_rcu() in sk_setup_caps()

2025-11-11 CVE-2025-40170

highMicrosoft MSRC 2025-W46

net/ip6_tunnel: Prevent perpetual tunnel growth

2025-11-11 CVE-2025-40173

mediumMicrosoft MSRC 2025-W46

net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

2025-11-11 CVE-2025-40187

mediumMicrosoft MSRC 2025-W46

netfilter: nft_objref: validate objref and objrefmap expressions

2025-11-11 CVE-2025-40206

mediumMicrosoft MSRC 2025-W46

Nuance PowerScribe 360 Information Disclosure Vulnerability

2025-11-11 CVE-2025-30398

highMicrosoft MSRC 2025-W46

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git r

2025-11-11 CVE-2025-59777

highMicrosoft MSRC 2025-W46

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git r

2025-11-11 CVE-2025-62689

highMicrosoft MSRC 2025-W46

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

2025-11-11 CVE-2025-58436

mediumMicrosoft MSRC 2025-W46

OpenPrinting CUPS vulnerable to stack based out-of-bound write

2025-11-11 CVE-2025-61915

mediumMicrosoft MSRC 2025-W46

Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()

2025-11-11 CVE-2025-12638

highMicrosoft MSRC 2025-W46

pid: Add a judgment for ns null in pid_nr_ns

2025-11-11 CVE-2025-40178

mediumMicrosoft MSRC 2025-W46

PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

2025-11-11 CVE-2025-12817

lowMicrosoft MSRC 2025-W46

PostgreSQL libpq undersizes allocations, via integer wraparound

2025-11-11 CVE-2025-12818

mediumMicrosoft MSRC 2025-W46

Potential denial of service in golang.org/x/crypto/ssh/agent

2025-11-11 CVE-2025-47913

highMicrosoft MSRC 2025-W46

Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello

2025-11-11 CVE-2025-11936

mediumMicrosoft MSRC 2025-W46

pwm: berlin: Fix wrong register in suspend/resume

2025-11-11 CVE-2025-40188

mediumMicrosoft MSRC 2025-W46

Revert "ipmi: fix msg stack when IPMI is disconnected"

2025-11-11 CVE-2025-40192

mediumMicrosoft MSRC 2025-W46

Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"

2025-11-11 CVE-2025-40210

mediumMicrosoft MSRC 2025-W46

RGW DoS attack with empty HTTP header in S3 object copy

2025-11-11 CVE-2024-47866

highMicrosoft MSRC 2025-W46

Rsync: Out of bounds array access via negative index

2025-11-11 CVE-2025-10158

mediumMicrosoft MSRC 2025-W46

runc: LSM labels can be bypassed with malicious config using dummy procfs files

2025-11-11 CVE-2025-52881

highMicrosoft MSRC 2025-W46

sctp: Fix MAC comparison to be constant-time

2025-11-11 CVE-2025-40204

highMicrosoft MSRC 2025-W46

smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

2025-11-11 CVE-2025-40139

highMicrosoft MSRC 2025-W46

smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

2025-11-11 CVE-2025-40168

mediumMicrosoft MSRC 2025-W46

Squashfs: reject negative file sizes in squashfs_read_inode()

2025-11-11 CVE-2025-40200

mediumMicrosoft MSRC 2025-W46

Storvsp.sys Driver Denial of Service Vulnerability

2025-11-11 CVE-2025-60708

mediumMicrosoft MSRC 2025-W46

Timing Side-Channel in PSK Binder Verification

2025-11-11 CVE-2025-11932

mediumMicrosoft MSRC 2025-W46

tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

2025-11-11 CVE-2025-40149

mediumMicrosoft MSRC 2025-W46

tls: wait for pending async decryptions if tls_strp_msg_hold fails

2025-11-11 CVE-2025-40176

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13226

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13227

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13230

highMicrosoft MSRC 2025-W46

UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

2025-11-11 CVE-2025-2486

highMicrosoft MSRC 2025-W46

usbnet: Fix using smp_processor_id() in preemptible code warnings

2025-11-11 CVE-2025-40164

mediumMicrosoft MSRC 2025-W46

Visual Studio Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62214

mediumMicrosoft MSRC 2025-W46

WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode

2025-11-11 CVE-2025-64713

mediumMicrosoft MSRC 2025-W46

WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction

2025-11-11 CVE-2025-64704

mediumMicrosoft MSRC 2025-W46

Windows Administrator Protection Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60718

highMicrosoft MSRC 2025-W46

Windows Administrator Protection Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60721

highMicrosoft MSRC 2025-W46