CyberAlerts

CVE-2025-26665

Windows upnphost.dll Elevation of Privilege Vulnerability

Description: Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.03%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26663

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Description: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVSS: HIGH (8.1)

EPSS Score: 0.09%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26652

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.

CVSS: HIGH (7.5)

EPSS Score: 2.14%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26649

Windows Secure Channel Elevation of Privilege Vulnerability

Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.03%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26648

Windows Kernel Elevation of Privilege Vulnerability

Description: Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.8)

EPSS Score: 0.04%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26647

Windows Kerberos Elevation of Privilege Vulnerability

Description: Improper input validation in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

CVSS: HIGH (8.1)

EPSS Score: 0.1%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26642

Microsoft Office Remote Code Execution Vulnerability

Description: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS: HIGH (7.8)

EPSS Score: 0.08%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26641

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Description: Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

CVSS: HIGH (7.5)

EPSS Score: 2.14%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26640

Windows Digital Media Elevation of Privilege Vulnerability

Description: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.03%

Source: CVE

April 8th, 2025 (11 days ago)

CVE-2025-26639

Windows USB Print Driver Elevation of Privilege Vulnerability

Description: Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.8)

EPSS Score: 0.07%

Source: CVE

April 8th, 2025 (11 days ago)

Threat and Vulnerability Intelligence Database

Example Searches: