CVE-2024-21907: VulnCheck: CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.Json

CVE-2025-55234: Windows SMB Elevation of Privilege Vulnerability

CVE-2025-54910: Microsoft Office Remote Code Execution Vulnerability

CVE-2025-54901: Microsoft Excel Information Disclosure Vulnerability

CVE-2025-55224: Windows Hyper-V Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Headline

CVE-2025-54915: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News