Security Vulnerabilities - CVEs Published In March 2025
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2025-03-11
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2025-03-11
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2025-03-11
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.3
EPSS Score
0.02
Published
2025-03-11
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2025-03-11
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2025-03-11
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS Score
8.1
EPSS Score
0.004
Published
2025-03-11
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2025-03-11
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2025-03-11
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
7.0
EPSS Score
0.002
Published
2025-03-11