on April 30, 2025 at 7:00 am — CVE-2025-30389 Azure Bot Framework SDK Elevation of Privilege Vulnerability
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.
on April 30, 2025 at 7:00 am — CVE-2025-33074 Azure Functions Remote Code Execution Vulnerability
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.
on April 30, 2025 at 7:00 am — CVE-2025-30392 Azure AI bot Elevation of Privilege Vulnerability
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.
on April 17, 2025 at 9:43 pm — Chromium: CVE-2025-3620 Use after free in USB
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202 5) for more information.
on April 17, 2025 at 9:43 pm — Chromium: CVE-2025-3620 Use after free in USB Read More »
on April 17, 2025 at 9:42 pm — Chromium: CVE-2025-3619 Heap buffer overflow in Codecs
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202 5) for more information.
on April 17, 2025 at 9:42 pm — Chromium: CVE-2025-3619 Heap buffer overflow in Codecs Read More »
on April 15, 2025 at 7:00 am — CVE-2024-21302 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
To comprehensively address CVE-2024-21302, Microsoft has released April 2025 security updates for all supported editions of Windows. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.