CyberAlerts

CVE-2025-26670

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Description: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.1)

EPSS Score: 0.12%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26669

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVSS: HIGH (8.8)

EPSS Score: 0.06%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26668

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (7.5)

EPSS Score: 0.04%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26666

Windows Media Remote Code Execution Vulnerability

Description: Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

CVSS: HIGH (7.8)

EPSS Score: 0.05%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26665

Windows upnphost.dll Elevation of Privilege Vulnerability

Description: Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.03%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26663

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Description: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.1)

EPSS Score: 0.09%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26652

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

CVSS: HIGH (7.5)

EPSS Score: 2.14%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26649

Windows Secure Channel Elevation of Privilege Vulnerability

Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.03%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26648

Windows Kernel Elevation of Privilege Vulnerability

Description: Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.8)

EPSS Score: 0.04%

Source: CVE

April 8th, 2025 (14 days ago)

CVE-2025-26647

Windows Kerberos Elevation of Privilege Vulnerability

Description: Improper input validation in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

CVSS: HIGH (8.1)

EPSS Score: 0.1%

Source: CVE

April 8th, 2025 (14 days ago)

Threat and Vulnerability Intelligence Database

Example Searches: