CVE-2025-29964 |
Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.07%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29963 |
Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.07%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29962 |
Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.07%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29842 |
Description: Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.
CVSS: HIGH (7.5) EPSS Score: 0.03%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29841 |
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.0) EPSS Score: 0.04%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29840 |
Description: Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.07%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29838 |
Description: Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.
CVSS: HIGH (7.4) EPSS Score: 0.05%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29833 |
Description: Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an authorized attacker to execute code over a network.
CVSS: HIGH (7.7) EPSS Score: 0.04%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29831 |
Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (7.5) EPSS Score: 0.09%
May 13th, 2025 (about 1 month ago)
|
CVE-2025-29826 |
Description: Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
CVSS: HIGH (7.3) EPSS Score: 0.05%
May 13th, 2025 (about 1 month ago)
|