Security
Headlines
HeadlinesLatestCVEs

Tag

#Security Vulnerability

CVE-2025-55226: Graphics Kernel Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to execute code locally.

Microsoft Security Response Center
#vulnerability#rce#auth#Graphics Kernel#Security Vulnerability
CVE-2025-54913: Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.

CVE-2025-54905: Microsoft Word Information Disclosure Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.