CVE-2025-29837
- EPSS 0.13%
- Veröffentlicht 13.05.2025 16:59:00
- Zuletzt bearbeitet 19.05.2025 18:18:32
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2025-29835
- EPSS 0.14%
- Veröffentlicht 13.05.2025 16:58:59
- Zuletzt bearbeitet 19.05.2025 18:19:02
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-29832
- EPSS 0.12%
- Veröffentlicht 13.05.2025 16:58:58
- Zuletzt bearbeitet 19.05.2025 18:19:40
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-29831
- EPSS 0.18%
- Veröffentlicht 13.05.2025 16:58:57
- Zuletzt bearbeitet 19.05.2025 18:20:14
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2025-29830
- EPSS 0.35%
- Veröffentlicht 13.05.2025 16:58:56
- Zuletzt bearbeitet 19.05.2025 18:20:32
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-32709
- EPSS 0.84%
- Veröffentlicht 13.05.2025 16:58:53
- Zuletzt bearbeitet 27.10.2025 17:12:59
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-32706
- EPSS 1.3%
- Veröffentlicht 13.05.2025 16:58:51
- Zuletzt bearbeitet 27.10.2025 17:13:04
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-32701
- EPSS 1.54%
- Veröffentlicht 13.05.2025 16:58:50
- Zuletzt bearbeitet 27.10.2025 17:13:08
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-29969
- EPSS 0.12%
- Veröffentlicht 13.05.2025 16:58:33
- Zuletzt bearbeitet 19.05.2025 14:20:58
Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
CVE-2025-29968
- EPSS 0.45%
- Veröffentlicht 13.05.2025 16:58:32
- Zuletzt bearbeitet 19.05.2025 14:21:08
Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.