CVE-2025-48004 CVSS:7.4

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

CVE-2025-59189 CVSS:7.4

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

CVE-2025-59497 CVSS:7

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.

CVE-2025-58722 CVSS:7.8

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2025-59254 CVSS:7.8

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2025-53782 CVSS:8.4

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

CVE-2025-59249 CVSS:8.8

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

CVE-2025-59248 CVSS:7.5

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-59195 CVSS:7

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.

CVE-2025-59229 CVSS:5.5

Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.

CVE-2025-59226 CVSS:7.8

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

CVE-2025-59238 CVSS:7.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.