Fixes 11 records
Priority MEDIUM 43
Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01318 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-822
Priority MEDIUM 40
Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02201 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-416
Priority MEDIUM 40
Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02234 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-77
Priority LOW 37
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00507 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-122
Priority LOW 37
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00657 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +7 CWE-122
Priority LOW 37
Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00473 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +6 CWE-20
Priority LOW 36
Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00401 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-20
Priority LOW 36
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00366 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +10 CWE-284
Priority LOW 36
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00402 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-476
Priority LOW 31
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01078 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +11 CWE-126
Priority LOW 26
Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01031 · Published 2025-12-09 · Fixed in 10.0.14393.8688, 10.0.17763.8146 +8 CWE-191
THREATIST.IORead the docs