CVE-2025-62456
- EPSS 0.09%
- Published 09.12.2025 17:55:33
- Last modified 12.12.2025 20:03:27
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.
CVE-2025-62454
- EPSS 0.08%
- Published 09.12.2025 17:55:32
- Last modified 12.12.2025 20:03:23
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
- EPSS 0.07%
- Published 11.11.2025 18:15:50
- Last modified 14.11.2025 15:41:32
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
- EPSS 0.05%
- Published 11.11.2025 18:15:49
- Last modified 14.11.2025 15:56:13
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-62209
- EPSS 0.05%
- Published 11.11.2025 18:15:48
- Last modified 17.11.2025 17:40:05
Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.
- EPSS 0.07%
- Published 11.11.2025 18:15:48
- Last modified 17.11.2025 17:16:02
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- EPSS 0.76%
- Published 11.11.2025 18:15:48
- Last modified 14.11.2025 02:00:02
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-62208
- EPSS 0.05%
- Published 11.11.2025 18:15:47
- Last modified 17.11.2025 17:40:13
Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.
CVE-2025-60724
- EPSS 0.14%
- Published 11.11.2025 18:15:41
- Last modified 17.11.2025 17:40:24
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- EPSS 0.07%
- Published 11.11.2025 18:15:40
- Last modified 17.11.2025 17:42:43
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.