Read the docs
Microsoft update

KB5058430

Monthly Rollup

View on Microsoft →

Fixed in

Fixes 29 records

Priority CRITICAL 92KEV

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.27263 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-843
Priority MEDIUM 56

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15592 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-122
Priority MEDIUM 43

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04378 Published 2025-05-13 Fixed in 16.0.18827.20000, 16.0.14326.22502 +15 CWE-122
Priority MEDIUM 43

Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01343 Published 2025-05-13 Fixed in 1.2.6228.0, 10.0.10240.21014 +13 CWE-122
Priority MEDIUM 43

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01427 Published 2025-05-13 Fixed in 1.2.6228.0, 10.0.10240.21014 +13 CWE-122
TI-2025-23772 CVE-2025-32707 · GHSA-fw33-q9gh-rp77

NTFS Elevation of Privilege Vulnerability

Priority LOW 37

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00556 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +5 CWE-125
Priority LOW 37

Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01162 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-367
Priority LOW 29

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00636 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-400
Priority LOW 27

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00745 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-125
Priority LOW 27

Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0112 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-126
Priority LOW 26

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00711 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-59