CVE-2025-59196 CVSS:7

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

CVE-2025-59280 CVSS:3.1

Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

CVE-2025-58726 CVSS:7.5

Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

CVE-2025-59203 CVSS:5.5

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally.

CVE-2025-55325 CVSS:5.5

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-59294 CVSS:2.1

Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack.

CVE-2025-59295 CVSS:8.8

Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

CVE-2025-55695 CVSS:5.5

Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.

Impact