CVE-2025-54098
- EPSS 0.06%
- Published 09.09.2025 17:01:20
- Last modified 02.10.2025 16:56:20
Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-54094
- EPSS 0.16%
- Published 09.09.2025 17:01:19
- Last modified 02.10.2025 17:12:34
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
- EPSS 0.04%
- Published 09.09.2025 17:01:18
- Last modified 02.10.2025 17:12:22
Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2025-53810
- EPSS 0.16%
- Published 09.09.2025 17:01:17
- Last modified 02.10.2025 17:11:37
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54091
- EPSS 0.07%
- Published 09.09.2025 17:01:17
- Last modified 02.10.2025 17:11:46
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53808
- EPSS 0.16%
- Published 09.09.2025 17:01:15
- Last modified 02.10.2025 17:52:33
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53804
- EPSS 0.04%
- Published 09.09.2025 17:01:13
- Last modified 02.10.2025 18:09:39
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53803
- EPSS 0.04%
- Published 09.09.2025 17:01:12
- Last modified 02.10.2025 18:09:31
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2025-53801
- EPSS 0.05%
- Published 09.09.2025 17:01:11
- Last modified 02.10.2025 18:54:02
Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.
CVE-2025-53799
- EPSS 0.09%
- Published 09.09.2025 17:01:10
- Last modified 02.10.2025 18:50:42
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.