CVE-2025-4609: Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo

CVE-2025-4664: Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader

CVE-2025-47161: Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

CVE-2025-29955: Windows Hyper-V Denial of Service Vulnerability

CVE-2025-29954: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

**According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?**

Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

Headline

CVE-2025-24043: WinDbg Remote Code Execution Vulnerability

Microsoft Security Response Center: Latest News