Security Vulnerabilities
Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-07-08
Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-07-08
Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-07-08
Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-07-08
Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-07-08
Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
CVSS Score
8.8
EPSS Score
0.0
Published
2025-07-08
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
CVSS Score
6.5
EPSS Score
0.001
Published
2025-07-08
Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
CVSS Score
6.2
EPSS Score
0.0
Published
2025-07-08
Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.001
Published
2025-07-08
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-07-08