Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Microsoft Word Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

Microsoft Defender for Endpoint on Android Spoofing Vulnerability

Windows Mobile Broadband Driver Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Microsoft Word Security Feature Bypass Vulnerability

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow. Per CWE-122: Heap-based Buffer Overflow, a heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().‍ Per CWE-190: Integer Overflow or Wraparound, is when a product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally.

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0690, CVE-2019-0701.

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.

Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.