CVE-2025-47988: Azure Monitor Agent Remote Code Execution Vulnerability

CVE-2025-49744: Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2025-49742: Windows Graphics Component Remote Code Execution Vulnerability

CVE-2025-48822: Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability

CVE-2025-48821: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Capability Consent Manager (camsvc service) allows an unauthorized attacker to elevate privileges locally.

Headline

CVE-2025-49690: Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News