CVE-2025-62473
- EPSS 0.06%
- Veröffentlicht 09.12.2025 17:55:38
- Zuletzt bearbeitet 12.12.2025 20:04:25
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-62549
- EPSS 0.11%
- Veröffentlicht 09.12.2025 17:55:38
- Zuletzt bearbeitet 24.12.2025 15:16:01
Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-62472
- EPSS 0.14%
- Veröffentlicht 09.12.2025 17:55:37
- Zuletzt bearbeitet 12.12.2025 20:04:21
Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-62470
- EPSS 0.06%
- Veröffentlicht 09.12.2025 17:55:36
- Zuletzt bearbeitet 12.12.2025 20:04:17
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-62466
- EPSS 0.06%
- Veröffentlicht 09.12.2025 17:55:35
- Zuletzt bearbeitet 12.12.2025 20:04:00
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2025-62458
- EPSS 0.06%
- Veröffentlicht 09.12.2025 17:55:34
- Zuletzt bearbeitet 12.12.2025 20:03:32
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- EPSS 0.08%
- Veröffentlicht 11.11.2025 18:15:50
- Zuletzt bearbeitet 14.11.2025 15:41:32
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
- EPSS 0.05%
- Veröffentlicht 11.11.2025 18:15:49
- Zuletzt bearbeitet 14.11.2025 15:56:13
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 11.11.2025 18:15:49
- Zuletzt bearbeitet 14.11.2025 15:55:01
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 11.11.2025 18:15:49
- Zuletzt bearbeitet 14.11.2025 15:54:21
Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.