CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-29964

Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.07%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29963

Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.07%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29962

Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.07%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29842

Description: Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.

CVSS: HIGH (7.5)

EPSS Score: 0.03%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29841

Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.04%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29840

Description: Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.07%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29838

Description: Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.

CVSS: HIGH (7.4)

EPSS Score: 0.05%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29833

Description: Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an authorized attacker to execute code over a network.

CVSS: HIGH (7.7)

EPSS Score: 0.04%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29831

Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (7.5)

EPSS Score: 0.09%

Source: CVE
May 13th, 2025 (about 1 month ago)

CVE-2025-29826

Description: Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

CVSS: HIGH (7.3)

EPSS Score: 0.05%

Source: CVE
May 13th, 2025 (about 1 month ago)