on June 10, 2025 at 7:00 am — CVE-2025-32710 Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CyberSecurity
on June 10, 2025 at 7:00 am — CVE-2025-32712 Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K – GRFX allows an authorized attacker to elevate privileges locally.
on June 10, 2025 at 7:00 am — CVE-2025-32712 Win32k Elevation of Privilege Vulnerability Read More »
on June 5, 2025 at 7:00 am — CVE-2025-47966 Power Automate Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.
on June 4, 2025 at 7:00 am — CVE-2025-21204 Windows Process Activation Elevation of Privilege Vulnerability
Added an FAQ to explain the remediation steps customers need to take to be protected from CVE-2025-21204. This includes a link to a script to aid in completing the remediation steps. This is an informational change only.
on June 3, 2025 at 8:50 pm — Chromium: CVE-2025-5419 Out of bounds read and write in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information. Google is aware that an exploit for CVE-2025-5419 exists in the wild.
on June 3, 2025 at 8:50 pm — Chromium: CVE-2025-5419 Out of bounds read and write in V8 Read More »
on June 3, 2025 at 8:50 pm — Chromium: CVE-2025-5068 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
on June 3, 2025 at 8:50 pm — Chromium: CVE-2025-5068 Use after free in Blink Read More »
on May 29, 2025 at 6:55 pm — Chromium: CVE-2025-5283 Use after free in libvpx
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
on May 29, 2025 at 6:55 pm — Chromium: CVE-2025-5283 Use after free in libvpx Read More »
on May 29, 2025 at 6:55 pm — Chromium: CVE-2025-5281 Inappropriate implementation in BFCache
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
on May 29, 2025 at 6:55 pm — Chromium: CVE-2025-5065 Inappropriate implementation in FileSystemAccess API
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.