Microsoft ≫ Windows Server 2025

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.

Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.