CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-27489	Azure Local Elevation of Privilege Vulnerability Description: Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally. CVSS: HIGH (7.8) EPSS Score: 0.07% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27487	Remote Desktop Client Remote Code Execution Vulnerability Description: Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. CVSS: HIGH (8.0) EPSS Score: 0.33% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27486	Windows Standards-Based Storage Management Service Denial of Service Vulnerability Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network. CVSS: HIGH (7.5) EPSS Score: 1.59% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27485	Windows Standards-Based Storage Management Service Denial of Service Vulnerability Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network. CVSS: HIGH (7.5) EPSS Score: 1.59% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27484	Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Description: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27483	NTFS Elevation of Privilege Vulnerability Description: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. CVSS: HIGH (7.8) EPSS Score: 0.06% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27482	Windows Remote Desktop Services Remote Code Execution Vulnerability Description: Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVSS: HIGH (8.1) EPSS Score: 0.08% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27481	Windows Telephony Service Remote Code Execution Vulnerability Description: Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network. CVSS: HIGH (8.8) EPSS Score: 0.06% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27480	Windows Remote Desktop Services Remote Code Execution Vulnerability Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVSS: HIGH (8.1) EPSS Score: 0.12% Source: CVE April 8th, 2025 (3 months ago)
CVE-2025-27479	Kerberos Key Distribution Proxy Service Denial of Service Vulnerability Description: Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network. CVSS: HIGH (7.5) EPSS Score: 2.14% Source: CVE April 8th, 2025 (3 months ago)