Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2025-49723: Windows StateRepository API Server file Tampering Vulnerability

According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?

In this case, a successful attack could be performed from a low privilege AppContainer. The attacker could elevate their privileges and execute code or access resources at a higher integrity level than that of the AppContainer execution environment.

Microsoft Security Response Center
#vulnerability#windows#Windows StateRepository API#Security Vulnerability

Microsoft Security Response Center: Latest News

CVE-2025-8882: Chromium: CVE-2025-8882 Use after free in Aura