CVE-2025-29841 |
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.0) EPSS Score: 0.04%
May 13th, 2025 (23 days ago)
|
CVE-2025-29840 |
Description: Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (8.8) EPSS Score: 0.07%
May 13th, 2025 (23 days ago)
|
CVE-2025-29838 |
Description: Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.
CVSS: HIGH (7.4) EPSS Score: 0.05%
May 13th, 2025 (23 days ago)
|
CVE-2025-29833 |
Description: Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an authorized attacker to execute code over a network.
CVSS: HIGH (7.7) EPSS Score: 0.04%
May 13th, 2025 (23 days ago)
|
CVE-2025-29831 |
Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVSS: HIGH (7.5) EPSS Score: 0.09%
May 13th, 2025 (23 days ago)
|
CVE-2025-29826 |
Description: Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
CVSS: HIGH (7.3) EPSS Score: 0.05%
May 13th, 2025 (23 days ago)
|
CVE-2025-27468 |
Description: Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.0) EPSS Score: 0.04%
May 13th, 2025 (23 days ago)
|
CVE-2025-26677 |
Description: Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
CVSS: HIGH (7.5) EPSS Score: 1.67%
May 13th, 2025 (23 days ago)
|
CVE-2025-24063 |
Description: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.05%
May 13th, 2025 (23 days ago)
|
CVE-2025-21264 |
Description: Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVSS: HIGH (7.1) EPSS Score: 0.07%
May 13th, 2025 (23 days ago)
|