Kategorie: Allgemein

CVE-2025-54106 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2025-54897 Microsoft SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-54895 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally.

CVE-2025-54903 Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54105 Microsoft Brokering File System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2025-54104 Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type (‚type confusion‘) in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2025-55226 Graphics Kernel Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Graphics Kernel allows an authorized attacker to execute code locally.

CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2025-54901 Microsoft Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2025-54098 Windows Hyper-V Elevation of Privilege Vulnerability

Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.