CVE-2025-27491
- EPSS 0.23%
- Published 08.04.2025 17:24:04
- Last modified 08.07.2025 17:16:00
Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
- EPSS 0.02%
- Published 08.04.2025 17:24:03
- Last modified 08.07.2025 17:16:11
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
CVE-2025-27486
- EPSS 8.67%
- Published 08.04.2025 17:24:02
- Last modified 08.07.2025 17:14:17
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- EPSS 0.21%
- Published 08.04.2025 17:24:01
- Last modified 07.07.2025 18:25:39
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVE-2025-27481
- EPSS 0.07%
- Published 08.04.2025 17:23:59
- Last modified 08.07.2025 19:14:14
Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVE-2025-27482
- EPSS 0.05%
- Published 08.04.2025 17:23:59
- Last modified 08.07.2025 19:14:37
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2025-27480
- EPSS 0.13%
- Published 08.04.2025 17:23:58
- Last modified 08.07.2025 19:13:43
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2025-27484
- EPSS 0.04%
- Published 08.04.2025 17:23:58
- Last modified 08.07.2025 19:15:10
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
CVE-2025-27485
- EPSS 8.67%
- Published 08.04.2025 17:23:57
- Last modified 08.07.2025 17:14:04
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
CVE-2025-27467
- EPSS 0.07%
- Published 08.04.2025 17:23:56
- Last modified 08.07.2025 18:44:15
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.