Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-29973

Description: Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.04%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29971

Description: Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.

CVSS: HIGH (7.5)

EPSS Score: 0.14%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29970

Description: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.8)

EPSS Score: 0.05%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29969

Description: Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.

CVSS: HIGH (7.5)

EPSS Score: 0.06%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29967

Description: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.13%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29966

Description: Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.13%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29964

Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.07%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29963

Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.07%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29962

Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.07%

Source: CVE
May 13th, 2025 (22 days ago)

CVE-2025-29842

Description: Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.

CVSS: HIGH (7.5)

EPSS Score: 0.03%

Source: CVE
May 13th, 2025 (22 days ago)