Microsoft Patch Tuesday October 2025
In its October 2025 Patch Tuesday release, Microsoft addressed a staggering 172 security vulnerabilities across its vast ecosystem, with four zero-day flaws stealing the spotlight, two of which are already being exploited in the wild.
This massive security update targets a wide range of products, from Windows operating systems and Microsoft Office to Azure cloud services, highlighting the relentless pace of cyberthreats as organizations race to secure their systems.
| Vulnerabilities | No’s |
|---|---|
| Elevation of Privilege | 80 |
| Remote Code Execution | 31 |
| Information Disclosure | 28 |
| Security Feature Bypass | 11 |
| Denial of Service | 11 |
| Spoofing | 10 |
| Tampering | 1 |
| Total | 172 |
Among the most pressing issues are two actively exploited zero-day vulnerabilities. CVE-2025-2884, an out-of-bounds read flaw in the TCG TPM2.0 reference implementation, stems from weak validation in cryptographic signing functions, exposing systems to information disclosure risks.
This vulnerability, publicly disclosed via CERT/CC, impacts trusted platform modules critical to secure boot processes.
The second, CVE-2025-47827, allows attackers to bypass Secure Boot in IGEL OS versions prior to 11 by exploiting improper signature verification, enabling malicious root filesystems to mount unverified images, a potential pathway for persistent malware.
Two other zero-days, CVE-2025-59234 and CVE-2025-59236, are use-after-free vulnerabilities in Microsoft Office and Excel, respectively.
Rated critical with CVSS scores of approximately 7.8, these flaws enable remote code execution (RCE) when users open malicious files, requiring no authentication.
Attackers could leverage these to gain full system control, paving the way for data theft or ransomware attacks.
Microsoft also patched CVE-2025-59230, a flaw in the Windows Remote Access Connection Manager that allows local privilege escalation due to improper access controls, which is also actively exploited.
The October update addresses a diverse set of vulnerabilities, including 11 critical RCE and elevation of privilege (EoP) issues, many tied to memory safety errors like use-after-free and buffer overflows in legacy codebases. The breakdown includes:
Elevation of Privilege: 80 vulnerabilities, the most prevalent category, including CVE-2025-49708 in the Microsoft Graphics Component, which enables privilege escalation over networks via memory corruption.
Remote Code Execution: 31 flaws, such as CVE-2025-59287 in Windows Server Update Service, which permits unauthenticated RCE over networks, posing a significant risk for supply-chain attacks.
Information Disclosure: 28 issues, including kernel memory leaks in vulnerabilities like CVE-2025-55693 and CVE-2025-59187.
Security Feature Bypass: 11 vulnerabilities, notably CVE-2025-55682 in BitLocker, which could allow physical attacks to bypass security measures.
Denial of Service: 11 flaws, such as CVE-2025-55698 in DirectX, which could disrupt services through null dereferences.
Spoofing: 10 issues, including CVE-2025-59239 in File Explorer and CVE-2025-59248 in Exchange Server, which could trick users into malicious actions.
Tampering: One vulnerability affecting Azure monitoring data.
| CVE Number | CVE Title | Impact | Max Severity |
|---|---|---|---|
| CVE-2025-59502 | Remote Procedure Call Denial of Service Vulnerability | Denial of Service | Moderate |
| CVE-2025-59497 | Microsoft Defender for Linux Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59494 | Azure Monitor Agent Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59489 | MITRE: CVE-2025-59489 Unity Gaming Engine Editor vulnerability | Elevation of Privilege | Important |
| CVE-2025-59295 | Windows URL Parsing Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59294 | Windows Taskbar Live Preview Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59292 | Azure Compute Gallery Elevation of Privilege Vulnerability | Elevation of Privilege | Critical |
| CVE-2025-59291 | Confidential Azure Container Instances Elevation of Privilege Vulnerability | Elevation of Privilege | Critical |
| CVE-2025-59290 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59289 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59288 | Playwright Spoofing Vulnerability | Spoofing | Moderate |
| CVE-2025-59287 | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | Remote Code Execution | Critical |
| CVE-2025-59286 | Copilot Spoofing Vulnerability | Spoofing | Critical |
| CVE-2025-59285 | Azure Monitor Agent Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59284 | Windows NTLM Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-59282 | Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59281 | Xbox Gaming Services Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59280 | Windows SMB Client Tampering Vulnerability | Tampering | Important |
| CVE-2025-59278 | Windows Authentication Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59277 | Windows Authentication Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59275 | Windows Authentication Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59272 | Copilot Spoofing Vulnerability | Spoofing | Critical |
| CVE-2025-59271 | Redis Enterprise Elevation of Privilege Vulnerability | Elevation of Privilege | Critical |
| CVE-2025-59261 | Windows Graphics Component Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59260 | Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59259 | Windows Local Session Manager (LSM) Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59258 | Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59257 | Windows Local Session Manager (LSM) Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59255 | Windows DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59254 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59253 | Windows Search Service Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59252 | M365 Copilot Spoofing Vulnerability | Spoofing | Critical |
| CVE-2025-59250 | JDBC Driver for SQL Server Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-59249 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59248 | Microsoft Exchange Server Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-59247 | Azure PlayFab Elevation of Privilege Vulnerability | Elevation of Privilege | Critical |
| CVE-2025-59246 | Azure Entra ID Elevation of Privilege Vulnerability | Elevation of Privilege | Critical |
| CVE-2025-59244 | NTLM Hash Disclosure Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-59243 | Microsoft Excel Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59242 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59241 | Windows Health and Optimized Experiences Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59238 | Microsoft PowerPoint Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59237 | Microsoft SharePoint Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59236 | Microsoft Excel Remote Code Execution Vulnerability | Remote Code Execution | Critical |
| CVE-2025-59235 | Microsoft Excel Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59234 | Microsoft Office Remote Code Execution Vulnerability | Remote Code Execution | Critical |
| CVE-2025-59233 | Microsoft Excel Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59232 | Microsoft Excel Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59231 | Microsoft Excel Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59230 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59229 | Microsoft Office Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59228 | Microsoft SharePoint Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59227 | Microsoft Office Remote Code Execution Vulnerability | Remote Code Execution | Critical |
| CVE-2025-59226 | Microsoft Office Visio Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59225 | Microsoft Excel Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59224 | Microsoft Excel Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59223 | Microsoft Excel Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59222 | Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59221 | Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-59220 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59218 | Azure Entra ID Elevation of Privilege Vulnerability | Elevation of Privilege | Critical |
| CVE-2025-59214 | Microsoft Windows File Explorer Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-59213 | Configuration Manager Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59211 | Windows Push Notification Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59210 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59209 | Windows Push Notification Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59208 | Windows MapUrlToZone Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59207 | Windows Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59206 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59205 | Windows Graphics Component Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59204 | Windows Management Services Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59203 | Windows State Repository API Server File Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59202 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59201 | Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59200 | Data Sharing Service Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-59199 | Software Protection Platform (SPP) Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59198 | Windows Search Service Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59197 | Windows ETL Channel Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59196 | Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59195 | Microsoft Graphics Component Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59194 | Windows Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59193 | Windows Management Services Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59192 | Storport.sys Driver Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59191 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59190 | Windows Search Service Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-59189 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59188 | Microsoft Failover Cluster Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59187 | Windows Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-59186 | Windows Kernel Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-59185 | NTLM Hash Disclosure Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-59184 | Storage Spaces Direct Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-58739 | Microsoft Windows File Explorer Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-58738 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58737 | Remote Desktop Protocol Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58736 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58735 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58734 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58733 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58732 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58731 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58730 | Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58729 | Windows Local Session Manager (LSM) Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-58728 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58727 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58726 | Windows SMB Server Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58725 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58724 | Arc Enabled Servers – Azure Connected Machine Agent Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58722 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58720 | Windows Cryptographic Services Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-58719 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58718 | Remote Desktop Client Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-58717 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-58716 | Windows Speech Runtime Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58715 | Windows Speech Runtime Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-58714 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55701 | Windows Authentication Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55700 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55699 | Windows Kernel Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55698 | DirectX Graphics Kernel Denial of Service Vulnerability | Denial of Service | Important |
| CVE-2025-55697 | Azure Local Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55696 | NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55695 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55694 | Windows Error Reporting Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55693 | Windows Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55692 | Windows Error Reporting Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55691 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55690 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55689 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55688 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55687 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55686 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55685 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55684 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55683 | Windows Kernel Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55682 | Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55681 | Desktop Windows Manager Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55680 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55679 | Windows Kernel Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55678 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55677 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55676 | Windows USB Video Class System Driver Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55340 | Windows Remote Desktop Protocol Security Feature Bypass | Security Feature Bypass | Important |
| CVE-2025-55339 | Windows Network Driver Interface Specification Driver Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55338 | Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55337 | Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55336 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55335 | Windows NTFS Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55334 | Windows Kernel Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55333 | Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55332 | Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55331 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55330 | Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55328 | Windows Hyper-V Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55326 | Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability | Remote Code Execution | Important |
| CVE-2025-55325 | Windows Storage Management Provider Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55321 | Azure Monitor Log Analytics Spoofing Vulnerability | Spoofing | Critical |
| CVE-2025-55320 | Configuration Manager Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55315 | ASP.NET Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-55248 | .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-55247 | .NET Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-55240 | Visual Studio Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-54957 | MITRE CVE-2025-54957: Integer overflow in Dolby Digital Plus audio decoder | Remote Code Execution | Important |
| CVE-2025-54132 | GitHub CVE-2025-54132: Arbitrary Image Fetch in Mermaid Diagram Tool | Information Disclosure | Important |
| CVE-2025-53782 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-53768 | Xbox IStorageService Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-53717 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-53150 | Windows Digital Media Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-53139 | Windows Hello Security Feature Bypass Vulnerability | Security Feature Bypass | Important |
| CVE-2025-50175 | Windows Digital Media Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-50174 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-50152 | Windows Kernel Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-49708 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Elevation of Privilege | Critical |
| CVE-2025-48813 | Virtual Secure Mode Spoofing Vulnerability | Spoofing | Important |
| CVE-2025-48004 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-47989 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | Elevation of Privilege | Important |
| CVE-2025-47979 | Microsoft Failover Cluster Information Disclosure Vulnerability | Information Disclosure | Important |
| CVE-2025-47827 | MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11 | Security Feature Bypass | Important |
| CVE-2025-2884 | Cert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation | Information Disclosure | Important |
A suspected China-nexus espionage group exploited a critical zero-day in BeyondTrust Remote Support, tracked as…
A critical unauthenticated OS command injection flaw in Collabora Online's built-in CODE Server app for…
A likely Russian-speaking threat actor used hundreds of AI agents to exploit PaperCut NG/MF servers,…
Microsoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates…
Researchers at pwn.ai used an AI-assisted research harness to find a critical Linux kernel networking…
NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s…