Security
Headlines
HeadlinesLatestCVEs

Tag

#auth

CVE-2025-29967: Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Microsoft Security Response Center
#vulnerability#rce#buffer_overflow#auth#Remote Desktop Gateway Service#Security Vulnerability
CVE-2025-29975: Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVE-2025-30375: Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.