deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-27537
Published: 2025-08-12
Description: Improper input validation for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE: CVE-2025-27559
Published: 2025-08-12
Description: Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01352.html
CVE: CVE-2025-27576
Published: 2025-08-12
Description: Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable denial of service via local access.
CVSS Score: 2.9 (LOW)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE: CVE-2025-27707
Published: 2025-08-12
Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE: CVE-2025-27717
Published: 2025-08-12
Description: Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01299.html
CVE: CVE-2025-32004
Published: 2025-08-12
Description: Improper input validation in the Intel Edger8r Tool for some Intel(R) SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 3.9 (LOW)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01383.html
CVE: CVE-2025-32086
Published: 2025-08-12
Description: Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-358
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01367.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-49563
Published: 2025-08-12
Description: Illustrator versions 28.7.8, 29.6.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb25-74.html
CVE: CVE-2025-49564
Published: 2025-08-12
Description: Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://helpx.adobe.com/security/products/illustrator/apsb25-74.html
CVE: CVE-2025-49567
Published: 2025-08-12
Description: Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/illustrator/apsb25-74.html
CVE: CVE-2025-49568
Published: 2025-08-12
Description: Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/illustrator/apsb25-74.html
CVE: CVE-2025-55166
Published: 2025-08-12
Description: savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. This issue has been patched in version 0.22.0.
CWE: CWE-79, CWE-601
References: https://github.com/darylldoyle/svg-sanitizer/commit/5a0a1eaf0c6b0b540dc945fe30c93cf106b357c1; https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-22wq-q86m-83fh
CVE: CVE-2025-55167
Published: 2025-08-12
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_remover.php endpoint, specifically in the id_dependente parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue has been patched in version 3.4.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/cb7f5e2b98ef6087b80659627f368612e3c535f3; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-4fqm-ww3v-6mwv
CVE: CVE-2025-20044
Published: 2025-08-12
Description: Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-667
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01245.html
CVE: CVE-2025-24999
Published: 2025-08-12
Description: Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24999
CVE: CVE-2025-25005
Published: 2025-08-12
Description: Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25005
CVE: CVE-2025-25006
Published: 2025-08-12
Description: Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-167
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25006
CVE: CVE-2025-25007
Published: 2025-08-12
Description: Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1286
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25007
CVE: CVE-2025-33051
Published: 2025-08-12
Description: Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33051
CVE: CVE-2025-47954
Published: 2025-08-12
Description: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47954
CVE: CVE-2025-48807
Published: 2025-08-12
Description: Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-923
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48807
CVE: CVE-2025-49554
Published: 2025-08-12
Description: Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/magento/apsb25-71.html
CVE: CVE-2025-49555
Published: 2025-08-12
Description: Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://helpx.adobe.com/security/products/magento/apsb25-71.html
CVE: CVE-2025-49556
Published: 2025-08-12
Description: Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction, and scope is unchanged.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb25-71.html
CVE: CVE-2025-49557
Published: 2025-08-12
Description: Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb25-71.html
CVE: CVE-2025-49558
Published: 2025-08-12
Description: Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the timing between the check of a resource's state and its use, allowing unauthorized write access. Exploitation of this issue does not require user interaction.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-367
References: https://helpx.adobe.com/security/products/magento/apsb25-71.html
CVE: CVE-2025-49559
Published: 2025-08-12
Description: Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to modify limited data. Exploitation of this issue does not require user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/magento/apsb25-71.html
CVE: CVE-2025-49707
Published: 2025-08-12
Description: Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.
CVSS Score: 7.9 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49707
CVE: CVE-2025-49712
Published: 2025-08-12
Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49712
CVE: CVE-2025-49736
Published: 2025-08-12
Description: The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-449
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49736
CVE: CVE-2025-49743
Published: 2025-08-12
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49743
CVE: CVE-2025-49745
Published: 2025-08-12
Description: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49745
CVE: CVE-2025-49751
Published: 2025-08-12
Description: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-820
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49751
CVE: CVE-2025-49755
Published: 2025-08-12
Description: User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49755
CVE: CVE-2025-49757
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49757
CVE: CVE-2025-49758
Published: 2025-08-12
Description: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49758
CVE: CVE-2025-49759
Published: 2025-08-12
Description: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49759
CVE: CVE-2025-49761
Published: 2025-08-12
Description: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49761
CVE: CVE-2025-49762
Published: 2025-08-12
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49762
CVE: CVE-2025-50153
Published: 2025-08-12
Description: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50153
CVE: CVE-2025-50154
Published: 2025-08-12
Description: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50154; https://cymulate.com/blog/zero-click-one-ntlm-microsoft-security-patch-bypass-cve-2025-50154/; https://github.com/rubenformation/CVE-2025-50154/
CVE: CVE-2025-50155
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50155
CVE: CVE-2025-50156
Published: 2025-08-12
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50156
CVE: CVE-2025-50157
Published: 2025-08-12
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50157
CVE: CVE-2025-50158
Published: 2025-08-12
Description: Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50158
CVE: CVE-2025-50159
Published: 2025-08-12
Description: Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50159
CVE: CVE-2025-50160
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50160
CVE: CVE-2025-50161
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50161
CVE: CVE-2025-50162
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50162
CVE: CVE-2025-50163
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50163
CVE: CVE-2025-50164
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50164
CVE: CVE-2025-50165
Published: 2025-08-12
Description: Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-822, CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50165
CVE: CVE-2025-50166
Published: 2025-08-12
Description: Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50166
CVE: CVE-2025-50167
Published: 2025-08-12
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50167
CVE: CVE-2025-50168
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50168
CVE: CVE-2025-50169
Published: 2025-08-12
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an unauthorized attacker to execute code over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50169
CVE: CVE-2025-50170
Published: 2025-08-12
Description: Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-280
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50170
CVE: CVE-2025-50171
Published: 2025-08-12
Description: Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50171
CVE: CVE-2025-50172
Published: 2025-08-12
Description: Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50172
CVE: CVE-2025-50173
Published: 2025-08-12
Description: Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1390
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50173
CVE: CVE-2025-50176
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50176
CVE: CVE-2025-50177
Published: 2025-08-12
Description: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50177
CVE: CVE-2025-53131
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53131
CVE: CVE-2025-53132
Published: 2025-08-12
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53132