NCSC-2025-0213

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Windows

view advisory published 2025-07-08

Microsoft heeft kwetsbaarheden verholpen in Windows.

01

describes (102)

Related CVEs.

IDseverity exploitable
CVE-2025-36357US——
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL requ…
CVE-2025-36350US——
Уязвимость системы очереди AMD Store Queue операционных систем Windows связана с раскрытием информации. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиде…
CVE-2025-49753US——
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-49744US—Exploit
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-49742US——
Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.
CVE-2025-49740US——
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-49735US——
Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.
CVE-2025-49733US——
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-49732US——
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-49730US—Exploit
Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
CVE-2025-49729US——
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-49727US——
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2025-49726US——
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVE-2025-49725US——
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVE-2025-49724US——
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.
CVE-2025-49723US—OT elevated—
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.
CVE-2025-49722US——
Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network.
CVE-2025-49721US——
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.
CVE-2025-49716US——
Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.
CVE-2025-49694US——
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
showing 20 of 102
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan