CVE-2025-54895 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by integer overflow or wraparound in SPNEGO Extended Negotiation.

CVE-2025-54113 CVSS:8.8

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by heap-based buffer overflow in Routing and Remote Access Service (RRAS).

CVE-2025-54104 CVSS:6.7

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by access of resource using incompatible type ('type confusion') in Defender Firewall Service.

CVE-2025-54110 CVSS:8.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by integer overflow or wraparound in Kernel.

CVE-2025-53803 CVSS:5.5

Microsoft Windows could allow a local authenticated attacker to obtain sensitive information, caused by generation of error message containing sensitive information in Kernel.

CVE-2025-54116 CVSS:7.3

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper access control in MultiPoint Services.

CVE-2025-54102 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by use after free in Connected Devices Platform Service.