CVE-2025-24046
- EPSS 0.12%
- Published 11.03.2025 16:59:07
- Last modified 02.07.2025 16:38:51
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2025-21247
- EPSS 0.22%
- Published 11.03.2025 16:59:06
- Last modified 03.07.2025 13:41:26
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-25008
- EPSS 0.14%
- Published 11.03.2025 16:59:05
- Last modified 01.07.2025 19:48:03
Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.
CVE-2025-24996
- EPSS 0.24%
- Published 11.03.2025 16:59:03
- Last modified 03.07.2025 17:14:06
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-24995
- EPSS 0.14%
- Published 11.03.2025 16:59:02
- Last modified 03.07.2025 17:19:40
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-21180
- EPSS 0.17%
- Published 11.03.2025 16:59:01
- Last modified 03.07.2025 15:04:03
Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.
CVE-2025-24987
- EPSS 0.16%
- Published 11.03.2025 16:59:00
- Last modified 07.07.2025 17:33:06
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
CVE-2025-24988
- EPSS 0.16%
- Published 11.03.2025 16:59:00
- Last modified 07.07.2025 17:34:42
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
CVE-2025-24044
- EPSS 0.14%
- Published 11.03.2025 16:58:52
- Last modified 07.07.2025 15:29:46
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-24035
- EPSS 0.36%
- Published 11.03.2025 16:58:51
- Last modified 03.07.2025 13:54:34
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.