deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-55697
Published: 2025-10-14
Description: Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55697
CVE: CVE-2025-55698
Published: 2025-10-14
Description: Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.
CVSS Score: 7.7 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55698
CVE: CVE-2025-55699
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55699
CVE: CVE-2025-55700
Published: 2025-10-14
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55700
CVE: CVE-2025-55701
Published: 2025-10-14
Description: Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55701
CVE: CVE-2025-58714
Published: 2025-10-14
Description: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58714
CVE: CVE-2025-58715
Published: 2025-10-14
Description: Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58715
CVE: CVE-2025-58716
Published: 2025-10-14
Description: Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58716
CVE: CVE-2025-58717
Published: 2025-10-14
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58717
CVE: CVE-2025-58718
Published: 2025-10-14
Description: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58718
CVE: CVE-2025-58719
Published: 2025-10-14
Description: Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58719
CVE: CVE-2025-58720
Published: 2025-10-14
Description: Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1240
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58720
CVE: CVE-2025-58722
Published: 2025-10-14
Description: Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58722
CVE: CVE-2025-58724
Published: 2025-10-14
Description: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58724
CVE: CVE-2025-58725
Published: 2025-10-14
Description: Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58725
CVE: CVE-2025-58726
Published: 2025-10-14
Description: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58726; https://www.vicarius.io/vsociety/posts/cve-2025-58726-detection-script-improper-access-control-affecting-smb-server-by-microsoft; https://www.vicarius.io/vsociety/posts/cve-2025-58726-mitigation-script-improper-access-control-affecting-smb-server-by-microsoft
CVE: CVE-2025-58727
Published: 2025-10-14
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58727
CVE: CVE-2025-58728
Published: 2025-10-14
Description: Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58728
CVE: CVE-2025-58729
Published: 2025-10-14
Description: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58729
CVE: CVE-2025-58730
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58730
CVE: CVE-2025-58731
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58731
CVE: CVE-2025-58732
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58732
CVE: CVE-2025-58733
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58733
CVE: CVE-2025-58734
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58734
CVE: CVE-2025-58735
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58735
CVE: CVE-2025-58736
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58736
CVE: CVE-2025-58737
Published: 2025-10-14
Description: Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58737
CVE: CVE-2025-58738
Published: 2025-10-14
Description: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58738
CVE: CVE-2025-58739
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58739
CVE: CVE-2025-59184
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59184
CVE: CVE-2025-59185
Published: 2025-10-14
Description: External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59185
CVE: CVE-2025-59186
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59186
CVE: CVE-2025-59187
Published: 2025-10-14
Description: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59187
CVE: CVE-2025-59188
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59188
CVE: CVE-2025-59189
Published: 2025-10-14
Description: Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
CVSS Score: 7.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59189
CVE: CVE-2025-59190
Published: 2025-10-14
Description: Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59190
CVE: CVE-2025-59191
Published: 2025-10-14
Description: Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59191
CVE: CVE-2025-59192
Published: 2025-10-14
Description: Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59192
CVE: CVE-2025-59193
Published: 2025-10-14
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59193
CVE: CVE-2025-59194
Published: 2025-10-14
Description: Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59194
CVE: CVE-2025-59195
Published: 2025-10-14
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59195
CVE: CVE-2025-59196
Published: 2025-10-14
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59196
CVE: CVE-2025-59197
Published: 2025-10-14
Description: Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59197
CVE: CVE-2025-59198
Published: 2025-10-14
Description: Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59198
CVE: CVE-2025-59199
Published: 2025-10-14
Description: Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59199
CVE: CVE-2025-59200
Published: 2025-10-14
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
CVSS Score: 7.7 (HIGH)
CWE: CWE-73, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59200
CVE: CVE-2025-59201
Published: 2025-10-14
Description: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59201
CVE: CVE-2025-59202
Published: 2025-10-14
Description: Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59202
CVE: CVE-2025-59203
Published: 2025-10-14
Description: Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59203
CVE: CVE-2025-59204
Published: 2025-10-14
Description: Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59204
CVE: CVE-2025-59205
Published: 2025-10-14
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59205
CVE: CVE-2025-59206
Published: 2025-10-14
Description: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59206
CVE: CVE-2025-59207
Published: 2025-10-14
Description: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59207
CVE: CVE-2025-59208
Published: 2025-10-14
Description: Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59208
CVE: CVE-2025-59209
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59209
CVE: CVE-2025-59210
Published: 2025-10-14
Description: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59210
CVE: CVE-2025-59211
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59211
CVE: CVE-2025-59213
Published: 2025-10-14
Description: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59213
CVE: CVE-2025-59214
Published: 2025-10-14
Description: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59214; https://cymulate.com/blog/ntlm-leak-cve-2025-59214/; https://github.com/rubenformation/CVE-2025-50154/
CVE: CVE-2025-59221
Published: 2025-10-14
Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59221
CVE: CVE-2025-59222
Published: 2025-10-14
Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59222
CVE: CVE-2025-59223
Published: 2025-10-14
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59223
CVE: CVE-2025-59224
Published: 2025-10-14
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59224
CVE: CVE-2025-59225
Published: 2025-10-14
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59225
CVE: CVE-2025-59226
Published: 2025-10-14
Description: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59226
CVE: CVE-2025-59227
Published: 2025-10-14
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59227
CVE: CVE-2025-59228
Published: 2025-10-14
Description: Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59228
CVE: CVE-2025-59229
Published: 2025-10-14
Description: Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-248
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59229
CVE: CVE-2025-59230
Published: 2025-10-14
Description: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59230; https://www.vicarius.io/vsociety/posts/cve-2025-59230-detection-script-elevation-of-privilege-vulnerability-affecting-windows-rasman; https://www.vicarius.io/vsociety/posts/cve-2025-59230-mitigation-script-elevation-of-privilege-vulnerability-affecting-windows-rasman
CVE: CVE-2025-59231
Published: 2025-10-14
Description: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59231
CVE: CVE-2025-59232
Published: 2025-10-14
Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59232
CVE: CVE-2025-59233
Published: 2025-10-14
Description: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59233
CVE: CVE-2025-59234
Published: 2025-10-14
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59234
CVE: CVE-2025-59235
Published: 2025-10-14
Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59235
CVE: CVE-2025-59236
Published: 2025-10-14
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59236
CVE: CVE-2025-59237
Published: 2025-10-14
Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59237
CVE: CVE-2025-59238
Published: 2025-10-14
Description: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59238
CVE: CVE-2025-59241
Published: 2025-10-14
Description: Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59241
CVE: CVE-2025-59242
Published: 2025-10-14
Description: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59242
CVE: CVE-2025-59243
Published: 2025-10-14
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59243