CVE-2025-26687
- EPSS 0.05%
- Published 08.04.2025 17:23:13
- Last modified 09.07.2025 16:44:36
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-26686
- EPSS 0.09%
- Published 08.04.2025 17:23:12
- Last modified 09.07.2025 16:32:05
Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2025-26668
- EPSS 0.05%
- Published 08.04.2025 17:23:09
- Last modified 09.07.2025 14:14:33
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-26669
- EPSS 0.07%
- Published 08.04.2025 17:23:08
- Last modified 09.07.2025 14:14:09
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-26666
- EPSS 0.08%
- Published 08.04.2025 17:23:07
- Last modified 09.07.2025 16:38:18
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
CVE-2025-24993
- EPSS 2.19%
- Published 11.03.2025 16:59:20
- Last modified 13.03.2025 14:21:58
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-24994
- EPSS 0.15%
- Published 11.03.2025 16:59:20
- Last modified 03.07.2025 17:22:17
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2025-24991
- EPSS 2.12%
- Published 11.03.2025 16:59:19
- Last modified 13.03.2025 14:20:06
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2025-24992
- EPSS 0.12%
- Published 11.03.2025 16:59:19
- Last modified 03.07.2025 17:27:58
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
CVE-2025-24076
- EPSS 1.8%
- Published 11.03.2025 16:59:16
- Last modified 07.07.2025 17:24:22
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.