CVE Alert: CVE-2025-53800 – Microsoft – Windows 10 Version 1809
CVE-2025-53800 HIGHNo exploitation known No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges...
microsoft
CVE Alert: CVE-2025-49692 – Microsoft – Azure Connected Machine Agent
CVE-2025-49692 HIGHNo exploitation known Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges...
CVE Alert: CVE-2025-53802 – Microsoft – Windows Server 2022
CVE-2025-53802 HIGHNo exploitation known Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. CVSS...
CVE Alert: CVE-2025-53801 – Microsoft – Windows 10 Version 1809
CVE-2025-53801 HIGHNo exploitation known Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally. CVSS v3.1...
CVE Alert: CVE-2025-55238 – Microsoft – Dynamics 365 FastTrack Implementation
CVE-2025-55238 HIGHNo exploitation known Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability CVSS v3.1 (7.5) Vendor Microsoft Product Dynamics 365...
CVE Alert: CVE-2025-49706 – Microsoft – Microsoft SharePoint Enterprise Server 2016
CVE-2025-49706 MEDIUMCISA KEVExploitation active Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network....
CVE Alert: CVE-2025-53770 – Microsoft – Microsoft SharePoint Enterprise Server 2016
CVE-2025-53770 CRITICALCISA KEVExploitation active Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code...
CVE Alert: CVE-2025-49704 – Microsoft – Microsoft SharePoint Enterprise Server 2016
CVE-2025-49704 HIGHCISA KEVExploitation active Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker...
CVE Alert: CVE-2025-49704 – Microsoft – Microsoft SharePoint Enterprise Server 2016
CVE-2025-49704 HIGHCISA KEVExploitation active Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker...
CVE Alert: CVE-2025-53770 – Microsoft – Microsoft SharePoint Enterprise Server 2016
CVE-2025-53770 CRITICALCISA KEVExploitation active Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code...
CVE Alert: CVE-2025-49706 – Microsoft – Microsoft SharePoint Enterprise Server 2016
CVE-2025-49706 MEDIUMCISA KEVExploitation active Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network....
Microsoft Monthly Security Update (July 2025)
Microsoft has released monthly security update for their products: Vulnerable ProductRisk LevelImpactsNotesWindows Medium RiskInformation Disclosure Spoofing Elevation of Privilege Remote Code...
Microsoft Monthly Security Update (July 2025)
Microsoft has released monthly security update for their products: Vulnerable ProductRisk LevelImpactsNotesWindows Medium RiskInformation Disclosure Spoofing Elevation of Privilege Remote Code...
Microsoft Monthly Security Update (July 2025)
Microsoft has released monthly security update for their products: Vulnerable ProductRisk LevelImpactsNotesWindows Medium RiskInformation Disclosure Spoofing Elevation of Privilege Remote Code...
Microsoft Monthly Security Update (June 2025)
Microsoft has released monthly security update for their products: Vulnerable ProductRisk LevelImpactsNotesMicrosoft Office Medium RiskRemote Code Execution Elevation of Privilege Windows Extremely...
Microsoft Monthly Security Update (May 2025)
Microsoft has released monthly security update for their products: Vulnerable ProductRisk LevelImpactsNotesBrowser Low RiskSpoofing Developer Tools Medium RiskSpoofing Information Disclosure Security Restriction...
SonicWall Products Remote Code Execution Vulnerability
A vulnerability was identified in SonicWall Products. A remote attacker could exploit this vulnerability to trigger remote code execution on the...
March Patch Tuesday: Microsoft Fixes Seven Critical Zero-Day Vulnerabilities
Microsoft's March Patch Tuesday brings renewed urgency for system administrators, mandating attention to over 50 vulnerabilities, including seven critical zero-days....
Microsoft Monthly Security Update (March 2025)
Microsoft has released monthly security update for their products: Vulnerable ProductRisk LevelImpactsNotesWindows High RiskRemote Code Execution Elevation of Privilege Spoofing Denial...
Microsoft Products Multiple Vulnerabilities
Multiple vulnerabilities were identified in Microsoft Products. A remote attacker could exploit some of these vulnerabilities to trigger elevation of...
Microsoft Addresses Two Actively Exploited Zero-Day Vulnerabilities
Microsoft has recently implemented critical security updates addressing two zero-day vulnerabilities that are currently under active exploitation. Microsoft has been...
Microsoft Monthly Security Update (February 2024)
Exploit in the wild has been detected for CVE-2024-21410, affecting Microsoft Exchange Server. The vulnerability could be exploited by sending...
Microsoft Monthly Security Update (January 2024)
Microsoft has released monthly security update for their products: CVE-2024-29059 vulnerability is being actively exploited. An attacker can use the exposed ObjRef...
Microsoft Monthly Security Update (October 2024)
Updated Description, Related Links.Proof of Concept exploit code Is publicly available for CVE-2024-43532. Updated Description, Related Links.Proof of Concept exploit code...
