Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
Microsoft tastes the unexpected consequences of tariffs on time
Source: TheRegister
March 24th, 2025 (27 days ago)

CVE-2025-29806
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Description: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVSS: MEDIUM (6.5)

EPSS Score: 0.15%

Source: CVE
March 23rd, 2025 (27 days ago)

CVE-2025-29795
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Description: Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.8)

EPSS Score: 0.04%

Source: CVE
March 23rd, 2025 (27 days ago)
Microsoft Trust Signing service abused to code-sign malware
Description: Cybercriminals are abusing Microsoft's Trusted Signing platform to code-sign malware executables with short-lived three-day certificates. [...]
Source: BleepingComputer
March 22nd, 2025 (29 days ago)
[remote] Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
Description: Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
Source: ExploitDB
March 22nd, 2025 (29 days ago)
Microsoft: Exchange Online bug mistakenly quarantines user emails
Description: Microsoft is investigating an Exchange Online bug causing anti-spam systems to mistakenly quarantine some users' emails. [...]
Source: BleepingComputer
March 21st, 2025 (29 days ago)

CVE-2025-29814
Microsoft Partner Center Elevation of Privilege Vulnerability
Description: Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.

CVSS: CRITICAL (9.3)

EPSS Score: 0.15%

SSVC Exploitation: none

Source: CVE
March 21st, 2025 (30 days ago)

CVE-2025-29807
Microsoft Dataverse Remote Code Execution Vulnerability
Description: Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

CVSS: HIGH (8.7)

EPSS Score: 0.65%

SSVC Exploitation: none

Source: CVE
March 21st, 2025 (30 days ago)
VSCode extensions found downloading early-stage ransomware
Description: Two malicious VSCode Marketplace extensions were found deploying in-development ransomware from a remote server, exposing critical gaps in Microsoft's review process. [...]
Source: BleepingComputer
March 20th, 2025 (about 1 month ago)
Microsoft lifts Windows 11 upgrade block after Asphalt 8 crash fix
Description: Microsoft has lifted an upgrade block that prevented Asphalt 8: Airborne players from upgrading their systems to Windows 11 24H2 due to compatibility issues. [...]
Source: BleepingComputer
March 20th, 2025 (about 1 month ago)