CVE-2025-54107
- EPSS 0.07%
- Published 09.09.2025 17:01:22
- Last modified 02.10.2025 16:33:56
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-54104
- EPSS 0.16%
- Published 09.09.2025 17:01:21
- Last modified 02.10.2025 16:27:57
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-54098
- EPSS 0.06%
- Published 09.09.2025 17:01:20
- Last modified 02.10.2025 16:56:20
Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-54094
- EPSS 0.16%
- Published 09.09.2025 17:01:19
- Last modified 02.10.2025 17:12:34
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
- EPSS 0.04%
- Published 09.09.2025 17:01:18
- Last modified 02.10.2025 17:12:22
Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2025-54091
- EPSS 0.07%
- Published 09.09.2025 17:01:17
- Last modified 02.10.2025 17:11:46
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53810
- EPSS 0.16%
- Published 09.09.2025 17:01:17
- Last modified 02.10.2025 17:11:37
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53808
- EPSS 0.16%
- Published 09.09.2025 17:01:15
- Last modified 02.10.2025 17:52:33
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVE-2025-53806
- EPSS 0.06%
- Published 09.09.2025 17:01:14
- Last modified 02.10.2025 18:10:07
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-53804
- EPSS 0.04%
- Published 09.09.2025 17:01:13
- Last modified 02.10.2025 18:09:39
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.