Microsoft ≫ Windows 11 25h2

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.