Microsoft ≫ Windows Server 2025

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.

Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.