Browse CVEs

HIGH 7.0 CVE-2025-53788 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Windows Subsystem For Linux 2.5.10+ Fix from $1,9502025-08-12 HIGH 8.8 CVE-2025-53778EPSS 38% Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,9502025-08-12 HIGH 8.4 CVE-2025-53784 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.5 CVE-2025-53783 Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. Dynamics 365 Guides 1.0.0.2025102802 / 1.0.94.2025168802+ Fix from $1,9502025-08-12 HIGH 7.2 CVE-2025-53779 Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network. Windows Server 2025 10.0.26100.4851+ Fix from $1,9502025-08-12 MEDIUM 6.5 CVE-2025-53781 Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a net… Ecesv6 Series Azure Vm Firmware No fix yet Fix from $1,6002025-08-12 CRITICAL 9.8 CVE-2025-53766EPSS 7% Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. 365 Copilot 10.0.10240.21100 / 10.0.14393.8330+ Fix from $2,3002025-08-12 HIGH 8.8 CVE-2025-53772EPSS 22% Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network. Web Deploy 4.0 10.0.2001+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53761 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53773 Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attack… Visual Studio 2022 17.14.12+ Fix from $1,9502025-08-12 MEDIUM 5.5 CVE-2025-53765 Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally. Azure App Service On Azure Stack 102.10.2.11+ Fix from $1,6002025-08-12 MEDIUM 5.5 CVE-2025-53769 External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally. Windows Security App 1000.27840.0.1000+ Fix from $1,6002025-08-12 HIGH 8.4 CVE-2025-53740 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53738 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53739 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53741 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53759 Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.1 CVE-2025-53760EPSS 12% Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Sharepoint Server 16.0.18526.20518+ Fix from $1,9502025-08-12 HIGH 8.4 CVE-2025-53733 Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53732 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Copilot 16.0.14326.22618 / 16.0.19127.20000+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53734 Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53735 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53737 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 MEDIUM 6.2 CVE-2025-53736 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps Mitigation only Fix from $1,6002025-08-12 HIGH 8.8 CVE-2025-53727 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege… Sql Server 2016 13.0.6465.1 / 13.0.7060.1+ Fix from $1,9502025-08-12 HIGH 8.4 CVE-2025-53731 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53726 Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges local… Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53729 Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally. Azure File Sync 18.3.0.0 / 19.2.0.0+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53730 Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-08-12 MEDIUM 6.5 CVE-2025-53728 Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose inform… Dynamics 365 9.1.39.04+ Fix from $1,6002025-08-12