CVE-2025-48822: Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability

CVE-2025-48821: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2025-48820: Windows AppX Deployment Service Elevation of Privilege Vulnerability

CVE-2025-48817: Remote Desktop Client Remote Code Execution Vulnerability

CVE-2025-48816: HID Class Driver Elevation of Privilege Vulnerability

**According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?**

This vulnerability could lead to the attacker gaining the ability to interact with other tenant’s applications and content.

Headline

CVE-2024-38220: Azure Stack Hub Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News