Kategorie: Allgemein

CVE-2025-54113 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2025-54911 Windows BitLocker Elevation of Privilege Vulnerability

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2025-54915 Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type (‚type confusion‘) in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2025-53807 Windows Graphics Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2025-54112 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.

CVE-2025-55228 Windows Graphics Component Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Windows Win32K – GRFX allows an authorized attacker to execute code locally.

CVE-2025-54109 Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type (‚type confusion‘) in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2025-55232 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network.

CVE-2025-54919 Windows Graphics Component Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Windows Win32K – GRFX allows an authorized attacker to execute code locally.

CVE-2025-53805 HTTP.sys Denial of Service Vulnerability

Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.