CVE-2025-26645
- EPSS 0.45%
- Published 11.03.2025 16:59:25
- Last modified 07.07.2025 18:47:48
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- EPSS 4.92%
- Published 11.03.2025 16:59:24
- Last modified 17.04.2025 18:29:29
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24993
- EPSS 2.19%
- Published 11.03.2025 16:59:20
- Last modified 13.03.2025 14:21:58
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-24991
- EPSS 2.12%
- Published 11.03.2025 16:59:19
- Last modified 13.03.2025 14:20:06
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2025-24984
- EPSS 13.87%
- Published 11.03.2025 16:59:18
- Last modified 13.03.2025 19:54:42
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2025-24985
- EPSS 1.1%
- Published 11.03.2025 16:59:18
- Last modified 29.05.2025 16:31:56
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2025-24072
- EPSS 0.12%
- Published 11.03.2025 16:59:15
- Last modified 07.07.2025 15:42:51
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2025-24067
- EPSS 0.14%
- Published 11.03.2025 16:59:14
- Last modified 03.07.2025 15:03:54
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2025-24071
- EPSS 62.45%
- Published 11.03.2025 16:59:14
- Last modified 03.07.2025 13:23:25
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-24061
- EPSS 0.22%
- Published 11.03.2025 16:59:12
- Last modified 03.07.2025 15:03:45
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.