CVE-2025-49738: Microsoft PC Manager Elevation of Privilege Vulnerability

CVE-2025-49737: Microsoft Teams Elevation of Privilege Vulnerability

CVE-2025-49742: Windows Graphics Component Remote Code Execution Vulnerability

CVE-2025-49740: Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2025-47988: Azure Monitor Agent Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.

Headline

CVE-2025-49665: Workspace Broker Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News