CVE-2025-55334 CVSS:6.2

Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-58729 CVSS:6.5

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

CVE-2025-59257 CVSS:6.5

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

CVE-2025-59259 CVSS:6.5

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

CVE-2025-59193 CVSS:7

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2025-59204 CVSS:5.5

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.

CVE-2025-59208 CVSS:7.1

Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.

CVE-2025-55339 CVSS:7.8

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally.

CVE-2025-55335 CVSS:7.4

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVE-2025-59284 CVSS:3.3

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.