deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-27187
Published: 2025-04-08
Description: After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb25-23.html
CVE: CVE-2025-27193
Published: 2025-04-08
Description: Bridge versions 14.1.5, 15.0.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb25-25.html
CVE: CVE-2025-27194
Published: 2025-04-08
Description: Media Encoder versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/media-encoder/apsb25-24.html
CVE: CVE-2025-27195
Published: 2025-04-08
Description: Media Encoder versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/media-encoder/apsb25-24.html
CVE: CVE-2025-27196
Published: 2025-04-08
Description: Premiere Pro versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/premiere_pro/apsb25-28.html
CVE: CVE-2025-27198
Published: 2025-04-08
Description: Photoshop Desktop versions 25.12.1, 26.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb25-30.html
CVE: CVE-2025-27199
Published: 2025-04-08
Description: Animate versions 24.0.7, 23.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/animate/apsb25-31.html
CVE: CVE-2025-27200
Published: 2025-04-08
Description: Animate versions 24.0.7, 23.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/animate/apsb25-31.html
CVE: CVE-2025-27201
Published: 2025-04-08
Description: Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb25-31.html
CVE: CVE-2025-27202
Published: 2025-04-08
Description: Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb25-31.html
CVE: CVE-2025-27204
Published: 2025-04-08
Description: After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb25-23.html
CVE: CVE-2025-27205
Published: 2025-04-08
Description: Adobe Experience Manager Screens versions FP11.3 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a malicious link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/aem-screens/apsb25-32.html
CVE: CVE-2025-27467
Published: 2025-04-08
Description: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27467
CVE: CVE-2025-27469
Published: 2025-04-08
Description: Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27469
CVE: CVE-2025-27470
Published: 2025-04-08
Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27470
CVE: CVE-2025-27471
Published: 2025-04-08
Description: Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27471
CVE: CVE-2025-27472
Published: 2025-04-08
Description: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27472
CVE: CVE-2025-27473
Published: 2025-04-08
Description: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27473
CVE: CVE-2025-27474
Published: 2025-04-08
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27474
CVE: CVE-2025-27475
Published: 2025-04-08
Description: Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27475
CVE: CVE-2025-27476
Published: 2025-04-08
Description: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27476
CVE: CVE-2025-27477
Published: 2025-04-08
Description: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27477
CVE: CVE-2025-27478
Published: 2025-04-08
Description: Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27478
CVE: CVE-2025-27479
Published: 2025-04-08
Description: Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-410
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27479
CVE: CVE-2025-27480
Published: 2025-04-08
Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27480
CVE: CVE-2025-27481
Published: 2025-04-08
Description: Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27481
CVE: CVE-2025-27482
Published: 2025-04-08
Description: Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27482
CVE: CVE-2025-27483
Published: 2025-04-08
Description: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27483
CVE: CVE-2025-27484
Published: 2025-04-08
Description: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27484
CVE: CVE-2025-27485
Published: 2025-04-08
Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27485
CVE: CVE-2025-27486
Published: 2025-04-08
Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27486
CVE: CVE-2025-27487
Published: 2025-04-08
Description: Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27487
CVE: CVE-2025-27489
Published: 2025-04-08
Description: Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27489
CVE: CVE-2025-27490
Published: 2025-04-08
Description: Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27490
CVE: CVE-2025-27491
Published: 2025-04-08
Description: Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
CVSS Score: 7.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27491
CVE: CVE-2025-27492
Published: 2025-04-08
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27492
CVE: CVE-2025-27727
Published: 2025-04-08
Description: Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27727
CVE: CVE-2025-27728
Published: 2025-04-08
Description: Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27728
CVE: CVE-2025-27729
Published: 2025-04-08
Description: Use after free in Windows Shell allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27729
CVE: CVE-2025-27730
Published: 2025-04-08
Description: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27730
CVE: CVE-2025-27731
Published: 2025-04-08
Description: Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27731
CVE: CVE-2025-27732
Published: 2025-04-08
Description: Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-591, CWE-667
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27732
CVE: CVE-2025-27733
Published: 2025-04-08
Description: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27733
CVE: CVE-2025-27735
Published: 2025-04-08
Description: Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-345
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27735
CVE: CVE-2025-27736
Published: 2025-04-08
Description: Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27736
CVE: CVE-2025-27737
Published: 2025-04-08
Description: Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27737
CVE: CVE-2025-27738
Published: 2025-04-08
Description: Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27738
CVE: CVE-2025-27739
Published: 2025-04-08
Description: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27739
CVE: CVE-2025-27740
Published: 2025-04-08
Description: Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1390
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27740
CVE: CVE-2025-27741
Published: 2025-04-08
Description: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27741
CVE: CVE-2025-27742
Published: 2025-04-08
Description: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27742
CVE: CVE-2025-27743
Published: 2025-04-08
Description: Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27743
CVE: CVE-2025-27744
Published: 2025-04-08
Description: Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27744
CVE: CVE-2025-27745
Published: 2025-04-08
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27745
CVE: CVE-2025-27746
Published: 2025-04-08
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27746
CVE: CVE-2025-27747
Published: 2025-04-08
Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27747
CVE: CVE-2025-27748
Published: 2025-04-08
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27748
CVE: CVE-2025-27749
Published: 2025-04-08
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27749
CVE: CVE-2025-27750
Published: 2025-04-08
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27750
CVE: CVE-2025-27751
Published: 2025-04-08
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27751
CVE: CVE-2025-27752
Published: 2025-04-08
Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27752
CVE: CVE-2025-29791
Published: 2025-04-08
Description: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29791
CVE: CVE-2025-29792
Published: 2025-04-08
Description: Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29792
CVE: CVE-2025-29793
Published: 2025-04-08
Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29793
CVE: CVE-2025-29794
Published: 2025-04-08
Description: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29794
CVE: CVE-2025-29800
Published: 2025-04-08
Description: Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29800
CVE: CVE-2025-29801
Published: 2025-04-08
Description: Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29801
CVE: CVE-2025-29802
Published: 2025-04-08
Description: Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29802
CVE: CVE-2025-29804
Published: 2025-04-08
Description: Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29804
CVE: CVE-2025-29805
Published: 2025-04-08
Description: Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29805
CVE: CVE-2025-29808
Published: 2025-04-08
Description: Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1240
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29808
CVE: CVE-2025-29809
Published: 2025-04-08
Description: Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.
CVSS Score: 7.1 (HIGH)
CWE: CWE-922
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29809
CVE: CVE-2025-29810
Published: 2025-04-08
Description: Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29810
CVE: CVE-2025-29811
Published: 2025-04-08
Description: Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-122, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29811
CVE: CVE-2025-29812
Published: 2025-04-08
Description: Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29812