{"id":10533,"date":"2025-10-15T13:27:40","date_gmt":"2025-10-15T06:27:40","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10533"},"modified":"2026-02-05T13:27:48","modified_gmt":"2026-02-05T06:27:48","slug":"microsoft-patch-tuesday-thang-10-2025-va-172-lo-hong-6-zero-day","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/10\/15\/microsoft-patch-tuesday-thang-10-2025-va-172-lo-hong-6-zero-day\/","title":{"rendered":"Microsoft Patch Tuesday th\u00e1ng 10\/2025: V\u00e1 172 l\u1ed7 h\u1ed5ng (6 zero-day)"},"content":{"rendered":"

Microsoft v\u1eeba ph\u00e1t h\u00e0nh b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt \u0111\u1ecbnh k\u1ef3 Patch Tuesday th\u00e1ng 10 v\u1edbi 172 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c v\u00e1, bao g\u1ed3m 6 l\u1ed7 h\u1ed5ng zero-day \u0111ang b\u1ecb tin t\u1eb7c khai th\u00e1c t\u00edch c\u1ef1c. \u0110\u00e2y c\u0169ng l\u00e0 c\u1ed9t m\u1ed1c \u0111\u1eb7c bi\u1ec7t khi Windows 10 ch\u00ednh th\u1ee9c k\u1ebft th\u00fac v\u00f2ng \u0111\u1eddi h\u1ed7 tr\u1ee3 mi\u1ec5n ph\u00ed, khi\u1ebfn b\u1ea3n v\u00e1 n\u00e0y tr\u1edf th\u00e0nh \u201ct\u1ea5m khi\u00ean cu\u1ed1i c\u00f9ng\u201d cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh ph\u1ed5 bi\u1ebfn n\u00e0y n\u1ebfu ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng \u0111\u0103ng k\u00fd gia h\u1ea1n b\u1ea3o m\u1eadt tr\u1ea3 ph\u00ed.<\/b><\/p>\n

\"Ti\u00eau<\/a>\u200b<\/div>\n

Zero-day l\u00e0 nh\u1eefng l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt ch\u01b0a c\u00f3 b\u1ea3n v\u00e1 t\u1ea1i th\u1eddi \u0111i\u1ec3m b\u1ecb khai th\u00e1c. Trong \u0111\u1ee3t c\u1eadp nh\u1eadt n\u00e0y, Microsoft x\u00e1c nh\u1eadn ba l\u1ed7 h\u1ed5ng \u0111\u00e3 b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf v\u00e0 hai l\u1ed7 h\u1ed5ng kh\u00e1c \u0111\u00e3 b\u1ecb c\u00f4ng khai tr\u01b0\u1edbc khi c\u00f3 b\u1ea3n v\u00e1, khi\u1ebfn nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng gia t\u0103ng \u0111\u00e1ng k\u1ec3.<\/p>\n

C\u00e1c l\u1ed7 h\u1ed5ng zero-day ti\u00eau bi\u1ec3u bao g\u1ed3m:<\/p>\n

    \n
  • CVE-2025-24990<\/b> v\u00e0 CVE-2025-24052:<\/b> L\u1ed7 h\u1ed5ng leo thang \u0111\u1eb7c quy\u1ec1n trong tr\u00ecnh \u0111i\u1ec1u khi\u1ec3n Agere Modem. Tin t\u1eb7c c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng driver h\u1ec7 th\u1ed1ng c\u0169 n\u00e0y \u0111\u1ec3 chi\u1ebfm quy\u1ec1n qu\u1ea3n tr\u1ecb vi\u00ean. Microsoft \u0111\u00e3 lo\u1ea1i b\u1ecf driver ltmdm64.sys trong b\u1ea3n v\u00e1 l\u1ea7n n\u00e0y, \u0111\u1ed3ng ngh\u0129a c\u00e1c thi\u1ebft b\u1ecb fax modem li\u00ean quan c\u00f3 th\u1ec3 ng\u1eebng ho\u1ea1t \u0111\u1ed9ng.<\/li>\n
  • CVE-2025-59230:<\/b> L\u1ed7 h\u1ed5ng trong Remote Access Connection Manager, cho ph\u00e9p tin t\u1eb7c c\u00f3 t\u00e0i kho\u1ea3n h\u1ee3p l\u1ec7 leo thang \u0111\u1eb7c quy\u1ec1n l\u00ean c\u1ea5p SYSTEM, c\u1ea5p quy\u1ec1n cao nh\u1ea5t tr\u00ean Windows.<\/li>\n
  • CVE-2025-47827:<\/b> L\u1ed7 h\u1ed5ng Secure Boot bypass trong IGEL OS tr\u01b0\u1edbc b\u1ea3n 11, cho ph\u00e9p b\u1ecf qua c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c kh\u1edfi \u0111\u1ed9ng an to\u00e0n.<\/li>\n
  • CVE-2025-0033:<\/b> L\u1ed7 h\u1ed5ng AMD EPYC SEV-SNP, g\u00e2y r\u1ee7i ro cho m\u00f4i tr\u01b0\u1eddng \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y n\u1ebfu k\u1ebb t\u1ea5n c\u00f4ng ki\u1ec3m so\u00e1t \u0111\u01b0\u1ee3c hypervisor.<\/li>\n
  • CVE-2025-2884:<\/b> L\u1ed7 h\u1ed5ng \u0111\u1ecdc tr\u00e0n b\u1ed9 nh\u1edb (Out-of-Bounds Read) trong TCG TPM 2.0 Reference Implementation, c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn r\u00f2 r\u1ec9 th\u00f4ng tin ho\u1eb7c g\u00e2y gi\u00e1n \u0111o\u1ea1n d\u1ecbch v\u1ee5.<\/li>\n<\/ul>\n

    Theo Microsoft, c\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y \u1ea3nh h\u01b0\u1edfng tr\u00ean di\u1ec7n r\u1ed9ng, bao g\u1ed3m nhi\u1ec1u phi\u00ean b\u1ea3n Windows v\u00e0 c\u00e1c n\u1ec1n t\u1ea3ng ph\u1ea7n c\u1ee9ng, ph\u1ea7n m\u1ec1m ph\u1ed5 bi\u1ebfn, trong \u0111\u00f3 c\u00f3 c\u1ea3 nh\u1eefng linh ki\u1ec7n ph\u1ea7n c\u1ee9ng (TPM, modem) v\u1ed1n \u0111\u00e3 t\u1ed3n t\u1ea1i t\u1eeb nhi\u1ec1u n\u0103m tr\u01b0\u1edbc.<\/p>\n

    \u0110a s\u1ed1 c\u00e1c zero-day trong \u0111\u1ee3t n\u00e0y thu\u1ed9c nh\u00f3m Elevation of Privilege (leo thang \u0111\u1eb7c quy\u1ec1n), chi\u1ebfm t\u1edbi 80 l\u1ed7 h\u1ed5ng trong t\u1ed5ng s\u1ed1 172. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a, tin t\u1eb7c c\u00f3 th\u1ec3 kh\u00f4ng c\u1ea7n truy c\u1eadp h\u1ec7 th\u1ed1ng t\u1eeb b\u00ean ngo\u00e0i, ch\u1ec9 c\u1ea7n m\u1ed9t t\u00e0i kho\u1ea3n b\u1ecb x\u00e2m nh\u1eadp ho\u1eb7c c\u00e0i c\u1eafm m\u00e3 \u0111\u1ed9c tr\u01b0\u1edbc \u0111\u00f3, sau \u0111\u00f3 khai th\u00e1c l\u1ed7 h\u1ed5ng \u0111\u1ec3 chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng.<\/p>\n

    \u0110\u1eb7c bi\u1ec7t nguy hi\u1ec3m l\u00e0 nh\u00f3m l\u1ed7 h\u1ed5ng li\u00ean quan t\u1edbi driver h\u1ec7 th\u1ed1ng, qu\u1ea3n l\u00fd k\u1ebft n\u1ed1i t\u1eeb xa v\u00e0 TPM\/Boot, b\u1edfi \u0111\u00e2y l\u00e0 nh\u1eefng th\u00e0nh ph\u1ea7n n\u1eb1m s\u00e2u trong l\u00f5i h\u1ec7 \u0111i\u1ec1u h\u00e0nh. Khi b\u1ecb khai th\u00e1c, c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt th\u00f4ng th\u01b0\u1eddng nh\u01b0 antivirus ho\u1eb7c EDR c\u00f3 th\u1ec3 kh\u00f3 ph\u00e1t hi\u1ec7n ho\u1eb7c ng\u0103n ch\u1eb7n k\u1ecbp th\u1eddi.<\/p>\n

    M\u1ee9c \u0111\u1ed9 r\u1ee7i ro c\u00e0ng cao trong m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p khi nhi\u1ec1u thi\u1ebft b\u1ecb Windows ch\u01b0a \u0111\u01b0\u1ee3c v\u00e1 ho\u1eb7c c\u00f2n ch\u1ea1y Windows 10, h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u1eeba ch\u00ednh th\u1ee9c k\u1ebft th\u00fac h\u1ed7 tr\u1ee3 mi\u1ec5n ph\u00ed. C\u00e1c t\u1ed5 ch\u1ee9c kh\u00f4ng c\u00f3 ch\u00ednh s\u00e1ch qu\u1ea3n l\u00fd b\u1ea3n v\u00e1 ch\u1eb7t ch\u1ebd s\u1ebd tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau h\u1ea5p d\u1eabn cho c\u00e1c nh\u00f3m APT ho\u1eb7c ransomware.<\/p>\n

    Kh\u00f4ng ch\u1ec9 Microsoft, h\u00e0ng lo\u1ea1t h\u00e3ng c\u00f4ng ngh\u1ec7 l\u1edbn c\u0169ng \u0111\u1ed3ng lo\u1ea1t c\u00f4ng b\u1ed1 b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt trong th\u00e1ng 10:<\/p>\n

      \n
    • Adobe v\u00e1 l\u1ed7i trong nhi\u1ec1u s\u1ea3n ph\u1ea9m ph\u1ed5 bi\u1ebfn.<\/li>\n
    • Cisco v\u00e1 l\u1ed7i nghi\u00eam tr\u1ecdng trong IOS v\u00e0 Unified Communications Manager.<\/li>\n
    • Draytek, Ivanti, Oracle, Redis, SAP, Synacor (Zimbra) c\u0169ng ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 cho c\u00e1c l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb khai th\u00e1c.<\/li>\n<\/ul>\n

      \u0110i\u1ec1u n\u00e0y cho th\u1ea5y b\u1ee9c tranh an ninh m\u1ea1ng th\u00e1ng 10 kh\u00f4ng ch\u1ec9 xoay quanh Microsoft m\u00e0 l\u00e0 m\u1ed9t \u0111\u1ee3t cao \u0111i\u1ec3m t\u1ea5n c\u00f4ng m\u1ea1ng quy m\u00f4 to\u00e0n c\u1ea7u.<\/p>\n

      Tr\u01b0\u1edbc l\u00e0n s\u00f3ng khai th\u00e1c zero-day ng\u00e0y c\u00e0ng gia t\u0103ng, c\u00e1c chuy\u00ean gia an ninh m\u1ea1ng khuy\u1ebfn c\u00e1o:<\/p>\n

        \n
      • C\u1eadp nh\u1eadt b\u1ea3n v\u00e1 ngay l\u1eadp t\u1ee9c tr\u00ean t\u1ea5t c\u1ea3 h\u1ec7 th\u1ed1ng Windows, \u0111\u1eb7c bi\u1ec7t l\u00e0 server v\u00e0 m\u00e1y t\u00ednh \u0111\u1ea7u cu\u1ed1i.<\/li>\n
      • Lo\u1ea1i b\u1ecf ho\u1eb7c v\u00f4 hi\u1ec7u h\u00f3a ph\u1ea7n c\u1ee9ng \/ driver c\u0169 (nh\u01b0 modem Agere) n\u1ebfu kh\u00f4ng c\u00f2n c\u1ea7n thi\u1ebft.<\/li>\n
      • Xem x\u00e9t k\u1ebf ho\u1ea1ch n\u00e2ng c\u1ea5p t\u1eeb Windows 10 l\u00ean Windows 11 ho\u1eb7c \u0111\u0103ng k\u00fd ESU \u0111\u1ec3 ti\u1ebfp t\u1ee5c nh\u1eadn b\u1ea3n v\u00e1.<\/li>\n
      • V\u1edbi doanh nghi\u1ec7p, tri\u1ec3n khai ch\u00ednh s\u00e1ch qu\u1ea3n l\u00fd b\u1ea3n v\u00e1 t\u1eadp trung, \u01b0u ti\u00ean x\u1eed l\u00fd c\u00e1c l\u1ed7 h\u1ed5ng zero-day c\u00f3 kh\u1ea3 n\u0103ng b\u1ecb khai th\u00e1c.<\/li>\n
      • Gi\u00e1m s\u00e1t h\u1ec7 th\u1ed1ng ch\u1eb7t ch\u1ebd, \u0111\u1eb7c bi\u1ec7t c\u00e1c h\u00e0nh vi leo thang \u0111\u1eb7c quy\u1ec1n, kh\u1edfi \u0111\u1ed9ng b\u1ea5t th\u01b0\u1eddng ho\u1eb7c thao t\u00e1c v\u1edbi TPM\/Secure Boot.<\/li>\n<\/ul>\n

        D\u01b0\u1edbi \u0111\u00e2y l\u00e0 danh s\u00e1ch c\u00e1c l\u1ed7 h\u1ed5ng v\u00e0 h\u1ec7 th\u1ed1ng b\u1ecb \u1ea3nh h\u01b0\u1edfng:<\/p>\n

        \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
        \n
        STT\u200b<\/div>\n<\/td>\n
        		\n
        Tag\u200b<\/div>\n<\/td>\n
        		\n
        CVE ID\u200b<\/div>\n<\/td>\n
        		\n
        CVE Title\u200b<\/div>\n<\/td>\n
        		Severity<\/td>\n<\/tr>\n
        1<\/td>\n.NET<\/td>\nCVE-2025-55247<\/a><\/td>\n.NET Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        2<\/td>\n.NET, .NET Framework, Visual Studio<\/td>\nCVE-2025-55248<\/a><\/td>\n.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        3<\/td>\nActive Directory Federation Services<\/td>\nCVE-2025-59258<\/a><\/td>\nWindows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        4<\/td>\nAgere Windows Modem Driver<\/td>\nCVE-2025-24990<\/a><\/td>\nWindows Agere Modem Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        5<\/td>\nAgere Windows Modem Driver<\/td>\nCVE-2025-24052<\/a><\/td>\nWindows Agere Modem Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        6<\/td>\nAMD Restricted Memory Page<\/td>\nCVE-2025-0033<\/a><\/td>\nAMD CVE-2025-0033: RMP Corruption During SNP Initialization<\/td>\nCritical<\/td>\n<\/tr>\n
        7<\/td>\nASP.NET Core<\/td>\nCVE-2025-55315<\/a><\/td>\nASP.NET Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        8<\/td>\nAzure Connected Machine Agent<\/td>\nCVE-2025-47989<\/a><\/td>\nAzure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        9<\/td>\nAzure Connected Machine Agent<\/td>\nCVE-2025-58724<\/a><\/td>\nArc Enabled Servers – Azure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        10<\/td>\nAzure Entra ID<\/td>\nCVE-2025-59218<\/a><\/td>\nAzure Entra ID Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        11<\/td>\nAzure Entra ID<\/td>\nCVE-2025-59246<\/a><\/td>\nAzure Entra ID Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        12<\/td>\nAzure Local<\/td>\nCVE-2025-55697<\/a><\/td>\nAzure Local Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        13<\/td>\nAzure Monitor<\/td>\nCVE-2025-55321<\/a><\/td>\nAzure Monitor Log Analytics Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        14<\/td>\nAzure Monitor Agent<\/td>\nCVE-2025-59285<\/a><\/td>\nAzure Monitor Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        15<\/td>\nAzure Monitor Agent<\/td>\nCVE-2025-59494<\/a><\/td>\nAzure Monitor Agent Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        16<\/td>\nAzure PlayFab<\/td>\nCVE-2025-59247<\/a><\/td>\nAzure PlayFab Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        17<\/td>\nConfidential Azure Container Instances<\/td>\nCVE-2025-59292<\/a><\/td>\nAzure Compute Gallery Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        18<\/td>\nConfidential Azure Container Instances<\/td>\nCVE-2025-59291<\/a><\/td>\nConfidential Azure Container Instances Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        19<\/td>\nConnected Devices Platform Service (Cdpsvc)<\/td>\nCVE-2025-59191<\/a><\/td>\nWindows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        20<\/td>\nConnected Devices Platform Service (Cdpsvc)<\/td>\nCVE-2025-55326<\/a><\/td>\nWindows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        21<\/td>\nConnected Devices Platform Service (Cdpsvc)<\/td>\nCVE-2025-58719<\/a><\/td>\nWindows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        22<\/td>\nCopilot<\/td>\nCVE-2025-59272<\/a><\/td>\nCopilot Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        23<\/td>\nCopilot<\/td>\nCVE-2025-59252<\/a><\/td>\nM365 Copilot Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        24<\/td>\nCopilot<\/td>\nCVE-2025-59286<\/a><\/td>\nCopilot Spoofing Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        25<\/td>\nData Sharing Service Client<\/td>\nCVE-2025-59200<\/a><\/td>\nData Sharing Service Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        26<\/td>\nGames<\/td>\nCVE-2025-59489<\/a><\/td>\nMITRE: CVE-2025-59489 Unity Gaming Engine Editor vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        27<\/td>\nGitHub<\/td>\nCVE-2025-59288<\/a><\/td>\nPlaywright Spoofing Vulnerability<\/td>\nModerate<\/td>\n<\/tr>\n
        28<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58735<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        29<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58732<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        30<\/td>\nInbox COM Objects<\/td>\nCVE-2025-59282<\/a><\/td>\nInternet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        31<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58733<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        32<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58734<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        33<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58738<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        34<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58731<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        35<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58730<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        36<\/td>\nInbox COM Objects<\/td>\nCVE-2025-58736<\/a><\/td>\nInbox COM Objects (Global Memory) Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        37<\/td>\nInternet Explorer<\/td>\nCVE-2025-59295<\/a><\/td>\nWindows URL Parsing Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        38<\/td>\nJDBC Driver for SQL Server<\/td>\nCVE-2025-59250<\/a><\/td>\nJDBC Driver for SQL Server Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        39<\/td>\nMariner<\/td>\nCVE-2025-39943<\/a><\/td>\nksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer<\/td>\nCritical<\/td>\n<\/tr>\n
        40<\/td>\nMariner<\/td>\nCVE-2025-39946<\/a><\/td>\ntls: make sure to abort the stream if headers are bogus<\/td>\nModerate<\/td>\n<\/tr>\n
        41<\/td>\nMariner<\/td>\nCVE-2025-39942<\/a><\/td>\nksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size<\/td>\nModerate<\/td>\n<\/tr>\n
        42<\/td>\nMariner<\/td>\nCVE-2025-39951<\/a><\/td>\num: virtio_uml: Fix use-after-free after put_device in probe<\/td>\nModerate<\/td>\n<\/tr>\n
        43<\/td>\nMariner<\/td>\nCVE-2025-39932<\/a><\/td>\nsmb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)<\/td>\nModerate<\/td>\n<\/tr>\n
        44<\/td>\nMariner<\/td>\nCVE-2025-39949<\/a><\/td>\nqed: Don’t collect too many protection override GRC elements<\/td>\nModerate<\/td>\n<\/tr>\n
        45<\/td>\nMariner<\/td>\nCVE-2025-39937<\/a><\/td>\nnet: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer<\/td>\nModerate<\/td>\n<\/tr>\n
        46<\/td>\nMariner<\/td>\nCVE-2025-39955<\/a><\/td>\ntcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().<\/td>\nModerate<\/td>\n<\/tr>\n
        47<\/td>\nMariner<\/td>\nCVE-2025-39895<\/a><\/td>\nsched: Fix sched_numa_find_nth_cpu() if mask offline<\/td>\nModerate<\/td>\n<\/tr>\n
        48<\/td>\nMariner<\/td>\nCVE-2025-11413<\/a><\/td>\nGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds<\/td>\nModerate<\/td>\n<\/tr>\n
        49<\/td>\nMariner<\/td>\nCVE-2025-11414<\/a><\/td>\nGNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds<\/td>\nModerate<\/td>\n<\/tr>\n
        50<\/td>\nMariner<\/td>\nCVE-2025-39938<\/a><\/td>\nASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed<\/td>\nModerate<\/td>\n<\/tr>\n
        51<\/td>\nMariner<\/td>\nCVE-2025-11495<\/a><\/td>\nGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow<\/td>\nModerate<\/td>\n<\/tr>\n
        52<\/td>\nMariner<\/td>\nCVE-2025-39934<\/a><\/td>\ndrm: bridge: anx7625: Fix NULL pointer dereference with early IRQ<\/td>\nModerate<\/td>\n<\/tr>\n
        53<\/td>\nMariner<\/td>\nCVE-2025-39929<\/a><\/td>\nsmb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path<\/td>\nModerate<\/td>\n<\/tr>\n
        54<\/td>\nMariner<\/td>\nCVE-2025-39945<\/a><\/td>\ncnic: Fix use-after-free bugs in cnic_delete_task<\/td>\nImportant<\/td>\n<\/tr>\n
        55<\/td>\nMariner<\/td>\nCVE-2025-39907<\/a><\/td>\nmtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer<\/td>\nCritical<\/td>\n<\/tr>\n
        56<\/td>\nMariner<\/td>\nCVE-2025-39913<\/a><\/td>\ntcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.<\/td>\nModerate<\/td>\n<\/tr>\n
        57<\/td>\nMariner<\/td>\nCVE-2025-39952<\/a><\/td>\nwifi: wilc1000: avoid buffer overflow in WID string configuration<\/td>\nImportant<\/td>\n<\/tr>\n
        58<\/td>\nMariner<\/td>\nCVE-2025-39940<\/a><\/td>\ndm-stripe: fix a possible integer overflow<\/td>\nModerate<\/td>\n<\/tr>\n
        59<\/td>\nMariner<\/td>\nCVE-2025-39953<\/a><\/td>\ncgroup: split cgroup_destroy_wq into 3 workqueues<\/td>\nModerate<\/td>\n<\/tr>\n
        60<\/td>\nMariner<\/td>\nCVE-2023-53469<\/a><\/td>\naf_unix: Fix null-ptr-deref in unix_stream_sendpage().<\/td>\nImportant<\/td>\n<\/tr>\n
        61<\/td>\nMariner<\/td>\nCVE-2025-39914<\/a><\/td>\ntracing: Silence warning when chunk allocation fails in trace_pid_write<\/td>\nModerate<\/td>\n<\/tr>\n
        62<\/td>\nMariner<\/td>\nCVE-2025-39905<\/a><\/td>\nnet: phylink: add lock for serializing concurrent pl->phydev writes with resolver<\/td>\nModerate<\/td>\n<\/tr>\n
        63<\/td>\nMariner<\/td>\nCVE-2025-39920<\/a><\/td>\npcmcia: Add error handling for add_interval() in do_validate_mem()<\/td>\nModerate<\/td>\n<\/tr>\n
        64<\/td>\nMariner<\/td>\nCVE-2025-39911<\/a><\/td>\ni40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path<\/td>\nLow<\/td>\n<\/tr>\n
        65<\/td>\nMariner<\/td>\nCVE-2025-39958<\/a><\/td>\niommu\/s390: Make attach succeed when the device was surprise removed<\/td>\nLow<\/td>\n<\/tr>\n
        66<\/td>\nMariner<\/td>\nCVE-2025-8291<\/a><\/td>\nZIP64 End of Central Directory (EOCD) Locator record offset not checked<\/td>\nModerate<\/td>\n<\/tr>\n
        67<\/td>\nMariner<\/td>\nCVE-2025-39957<\/a><\/td>\nwifi: mac80211: increase scan_ies_len for S1G<\/td>\nLow<\/td>\n<\/tr>\n
        68<\/td>\nMariner<\/td>\nCVE-2025-46818<\/a><\/td>\nRedis: Authenticated users can execute LUA scripts as a different user<\/td>\nModerate<\/td>\n<\/tr>\n
        69<\/td>\nMariner<\/td>\nCVE-2025-46817<\/a><\/td>\nLua library commands may lead to integer overflow and potential RCE<\/td>\nImportant<\/td>\n<\/tr>\n
        70<\/td>\nMariner<\/td>\nCVE-2022-50502<\/a><\/td>\nmm: \/proc\/pid\/smaps_rollup: fix no vma’s null-deref<\/td>\nModerate<\/td>\n<\/tr>\n
        71<\/td>\nMariner<\/td>\nCVE-2025-39944<\/a><\/td>\nocteontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()<\/td>\nImportant<\/td>\n<\/tr>\n
        72<\/td>\nMariner<\/td>\nCVE-2025-11234<\/a><\/td>\nQemu-kvm: vnc websocket handshake use-after-free<\/td>\nModerate<\/td>\n<\/tr>\n
        73<\/td>\nMariner<\/td>\nCVE-2025-49844<\/a><\/td>\nRedis Lua Use-After-Free may lead to remote code execution<\/td>\nCritical<\/td>\n<\/tr>\n
        74<\/td>\nMariner<\/td>\nCVE-2025-10729<\/a><\/td>\nUse-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG<\/td>\nImportant<\/td>\n<\/tr>\n
        75<\/td>\nMariner<\/td>\nCVE-2025-39961<\/a><\/td>\niommu\/amd\/pgtbl: Fix possible race while increase page table level<\/td>\nModerate<\/td>\n<\/tr>\n
        76<\/td>\nMariner<\/td>\nCVE-2025-61984<\/a><\/td>\nssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)<\/td>\nLow<\/td>\n<\/tr>\n
        77<\/td>\nMariner<\/td>\nCVE-2025-46819<\/a><\/td>\nRedis is vulnerable to DoS via specially crafted LUA scripts<\/td>\nModerate<\/td>\n<\/tr>\n
        78<\/td>\nMariner<\/td>\nCVE-2025-37727<\/a><\/td>\nElasticsearch Insertion of sensitive information in log file<\/td>\nModerate<\/td>\n<\/tr>\n
        79<\/td>\nMariner<\/td>\nCVE-2025-11412<\/a><\/td>\nGNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds<\/td>\nModerate<\/td>\n<\/tr>\n
        80<\/td>\nMariner<\/td>\nCVE-2025-39931<\/a><\/td>\ncrypto: af_alg – Set merge to zero early in af_alg_sendmsg<\/td>\nModerate<\/td>\n<\/tr>\n
        81<\/td>\nMariner<\/td>\nCVE-2025-39933<\/a><\/td>\nsmb: client: let recv_done verify data_offset, data_length and remaining_data_length<\/td>\nModerate<\/td>\n<\/tr>\n
        82<\/td>\nMariner<\/td>\nCVE-2025-39947<\/a><\/td>\nnet\/mlx5e: Harden uplink netdev access against device unbind<\/td>\nModerate<\/td>\n<\/tr>\n
        83<\/td>\nMariner<\/td>\nCVE-2025-61985<\/a><\/td>\nssh in OpenSSH before 10.1 allows the ‘\\0’ character in an ssh:\/\/ URI, potentially leading to code execution when a ProxyCommand is used.<\/td>\nLow<\/td>\n<\/tr>\n
        84<\/td>\nMariner<\/td>\nCVE-2025-10728<\/a><\/td>\nUncontrolled recursion in Qt SVG module<\/td>\nImportant<\/td>\n<\/tr>\n
        85<\/td>\nMariner<\/td>\nCVE-2025-39916<\/a><\/td>\nmm\/damon\/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()<\/td>\nModerate<\/td>\n<\/tr>\n
        86<\/td>\nMariner<\/td>\nCVE-2025-39902<\/a><\/td>\nmm\/slub: avoid accessing metadata when pointer is invalid in object_err()<\/td>\nModerate<\/td>\n<\/tr>\n
        87<\/td>\nMariner<\/td>\nCVE-2025-39923<\/a><\/td>\ndmaengine: qcom: bam_dma: Fix DT error handling for num-channels\/ees<\/td>\nModerate<\/td>\n<\/tr>\n
        88<\/td>\nMariner<\/td>\nCVE-2025-39898<\/a><\/td>\ne1000e: fix heap overflow in e1000_set_eeprom<\/td>\nCritical<\/td>\n<\/tr>\n
        89<\/td>\nMariner<\/td>\nCVE-2025-39925<\/a><\/td>\ncan: j1939: implement NETDEV_UNREGISTER notification handler<\/td>\nCritical<\/td>\n<\/tr>\n
        90<\/td>\nMariner<\/td>\nCVE-2025-39891<\/a><\/td>\nwifi: mwifiex: Initialize the chan_stats array to zero<\/td>\nModerate<\/td>\n<\/tr>\n
        91<\/td>\nMariner<\/td>\nCVE-2025-39927<\/a><\/td>\nceph: fix race condition validating r_parent before applying state<\/td>\nModerate<\/td>\n<\/tr>\n
        92<\/td>\nMariner<\/td>\nCVE-2025-39901<\/a><\/td>\ni40e: remove read access to debugfs files<\/td>\nImportant<\/td>\n<\/tr>\n
        93<\/td>\nMariner<\/td>\nCVE-2025-39910<\/a><\/td>\nmm\/vmalloc, mm\/kasan: respect gfp mask in kasan_populate_vmalloc()<\/td>\nCritical<\/td>\n<\/tr>\n
        94<\/td>\nMariner<\/td>\nCVE-2025-39909<\/a><\/td>\nmm\/damon\/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()<\/td>\nModerate<\/td>\n<\/tr>\n
        95<\/td>\nMicrosoft Brokering File System<\/td>\nCVE-2025-48004<\/a><\/td>\nMicrosoft Brokering File System Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        96<\/td>\nMicrosoft Brokering File System<\/td>\nCVE-2025-59189<\/a><\/td>\nMicrosoft Brokering File System Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        97<\/td>\nMicrosoft Configuration Manager<\/td>\nCVE-2025-55320<\/a><\/td>\nConfiguration Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        98<\/td>\nMicrosoft Configuration Manager<\/td>\nCVE-2025-59213<\/a><\/td>\nConfiguration Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        99<\/td>\nMicrosoft Defender for Linux<\/td>\nCVE-2025-59497<\/a><\/td>\nMicrosoft Defender for Linux Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        100<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11213<\/a><\/td>\nChromium: CVE-2025-11213 Inappropriate implementation in Omnibox<\/td>\nUnknown<\/td>\n<\/tr>\n
        101<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11210<\/a><\/td>\nChromium: CVE-2025-11210 Side-channel information leakage in Tab<\/td>\nUnknown<\/td>\n<\/tr>\n
        102<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11460<\/a><\/td>\nChromium: CVE-2025-11460 Use after free in Storage<\/td>\nUnknown<\/td>\n<\/tr>\n
        103<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11458<\/a><\/td>\nChromium: CVE-2025-11458 Heap buffer overflow in Sync<\/td>\nUnknown<\/td>\n<\/tr>\n
        104<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11215<\/a><\/td>\nChromium: CVE-2025-11215 Off by one error in V8<\/td>\nUnknown<\/td>\n<\/tr>\n
        105<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11216<\/a><\/td>\nChromium: CVE-2025-11216 Inappropriate implementation in Storage<\/td>\nUnknown<\/td>\n<\/tr>\n
        106<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11208<\/a><\/td>\nChromium: CVE-2025-11208 Inappropriate implementation in Media<\/td>\nUnknown<\/td>\n<\/tr>\n
        107<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11212<\/a><\/td>\nChromium: CVE-2025-11212 Inappropriate implementation in Media<\/td>\nUnknown<\/td>\n<\/tr>\n
        108<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11211<\/a><\/td>\nChromium: CVE-2025-11211 Out of bounds read in Media<\/td>\nUnknown<\/td>\n<\/tr>\n
        109<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11205<\/a><\/td>\nChromium: CVE-2025-11205 Heap buffer overflow in WebGPU<\/td>\nUnknown<\/td>\n<\/tr>\n
        110<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11207<\/a><\/td>\nChromium: CVE-2025-11207 Side-channel information leakage in Storage<\/td>\nUnknown<\/td>\n<\/tr>\n
        111<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11209<\/a><\/td>\nChromium: CVE-2025-11209 Inappropriate implementation in Omnibox<\/td>\nUnknown<\/td>\n<\/tr>\n
        112<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11206<\/a><\/td>\nChromium: CVE-2025-11206 Heap buffer overflow in Video<\/td>\nUnknown<\/td>\n<\/tr>\n
        113<\/td>\nMicrosoft Edge (Chromium-based)<\/td>\nCVE-2025-11219<\/a><\/td>\nChromium: CVE-2025-11219 Use after free in V8<\/td>\nUnknown<\/td>\n<\/tr>\n
        114<\/td>\nMicrosoft Exchange Server<\/td>\nCVE-2025-59248<\/a><\/td>\nMicrosoft Exchange Server Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        115<\/td>\nMicrosoft Exchange Server<\/td>\nCVE-2025-59249<\/a><\/td>\nMicrosoft Exchange Server Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        116<\/td>\nMicrosoft Exchange Server<\/td>\nCVE-2025-53782<\/a><\/td>\nMicrosoft Exchange Server Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        117<\/td>\nMicrosoft Failover Cluster Virtual Driver<\/td>\nCVE-2025-59260<\/a><\/td>\nMicrosoft Failover Cluster Virtual Driver Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        118<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-59195<\/a><\/td>\nMicrosoft Graphics Component Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        119<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2016-9535<\/a><\/td>\nMITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        120<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-59261<\/a><\/td>\nWindows Graphics Component Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        121<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-49708<\/a><\/td>\nMicrosoft Graphics Component Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        122<\/td>\nMicrosoft Graphics Component<\/td>\nCVE-2025-59205<\/a><\/td>\nWindows Graphics Component Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        123<\/td>\nMicrosoft Office<\/td>\nCVE-2025-59229<\/a><\/td>\nMicrosoft Office Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        124<\/td>\nMicrosoft Office<\/td>\nCVE-2025-59227<\/a><\/td>\nMicrosoft Office Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        125<\/td>\nMicrosoft Office<\/td>\nCVE-2025-59234<\/a><\/td>\nMicrosoft Office Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        126<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59223<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        127<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59224<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        128<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59225<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        129<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59232<\/a><\/td>\nMicrosoft Excel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        130<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59235<\/a><\/td>\nMicrosoft Excel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        131<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59233<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        132<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59231<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        133<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59236<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        134<\/td>\nMicrosoft Office Excel<\/td>\nCVE-2025-59243<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        135<\/td>\nMicrosoft Office PowerPoint<\/td>\nCVE-2025-59238<\/a><\/td>\nMicrosoft PowerPoint Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        136<\/td>\nMicrosoft Office SharePoint<\/td>\nCVE-2025-59237<\/a><\/td>\nMicrosoft SharePoint Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        137<\/td>\nMicrosoft Office SharePoint<\/td>\nCVE-2025-59228<\/a><\/td>\nMicrosoft SharePoint Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        138<\/td>\nMicrosoft Office Visio<\/td>\nCVE-2025-59226<\/a><\/td>\nMicrosoft Office Visio Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        139<\/td>\nMicrosoft Office Word<\/td>\nCVE-2025-59222<\/a><\/td>\nMicrosoft Word Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        140<\/td>\nMicrosoft Office Word<\/td>\nCVE-2025-59221<\/a><\/td>\nMicrosoft Word Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        141<\/td>\nMicrosoft PowerShell<\/td>\nCVE-2025-25004<\/a><\/td>\nPowerShell Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        142<\/td>\nMicrosoft Windows<\/td>\nCVE-2025-55701<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        143<\/td>\nMicrosoft Windows Codecs Library<\/td>\nCVE-2025-54957<\/a><\/td>\nMITRE CVE-2025-54957: Integer overflow in Dolby Digital Plus audio decoder<\/td>\nImportant<\/td>\n<\/tr>\n
        144<\/td>\nMicrosoft Windows Search Component<\/td>\nCVE-2025-59198<\/a><\/td>\nWindows Search Service Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        145<\/td>\nMicrosoft Windows Search Component<\/td>\nCVE-2025-59190<\/a><\/td>\nWindows Search Service Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        146<\/td>\nMicrosoft Windows Search Component<\/td>\nCVE-2025-59253<\/a><\/td>\nWindows Search Service Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        147<\/td>\nMicrosoft Windows Speech<\/td>\nCVE-2025-58715<\/a><\/td>\nWindows Speech Runtime Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        148<\/td>\nMicrosoft Windows Speech<\/td>\nCVE-2025-58716<\/a><\/td>\nWindows Speech Runtime Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        149<\/td>\nNetwork Connection Status Indicator (NCSI)<\/td>\nCVE-2025-59201<\/a><\/td>\nNetwork Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        150<\/td>\nNtQueryInformation Token function (ntifs.h)<\/td>\nCVE-2025-55696<\/a><\/td>\nNtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        151<\/td>\nRedis Enterprise<\/td>\nCVE-2025-59271<\/a><\/td>\nRedis Enterprise Elevation of Privilege Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        152<\/td>\nRemote Desktop Client<\/td>\nCVE-2025-58718<\/a><\/td>\nRemote Desktop Client Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        153<\/td>\nSoftware Protection Platform (SPP)<\/td>\nCVE-2025-59199<\/a><\/td>\nSoftware Protection Platform (SPP) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        154<\/td>\nStorport.sys Driver<\/td>\nCVE-2025-59192<\/a><\/td>\nStorport.sys Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        155<\/td>\nTCG TPM2.0<\/td>\nCVE-2025-2884<\/a><\/td>\nCert CC: CVE-2025-2884 Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation<\/td>\nImportant<\/td>\n<\/tr>\n
        156<\/td>\nVirtual Secure Mode<\/td>\nCVE-2025-48813<\/a><\/td>\nVirtual Secure Mode Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        157<\/td>\nVisual Studio<\/td>\nCVE-2025-55240<\/a><\/td>\nVisual Studio Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        158<\/td>\nVisual Studio<\/td>\nCVE-2025-54132<\/a><\/td>\nGitHub CVE-2025-54132: Arbitrary Image Fetch in Mermaid Diagram Tool<\/td>\nImportant<\/td>\n<\/tr>\n
        159<\/td>\nWindows Ancillary Function Driver for WinSock<\/td>\nCVE-2025-58714<\/a><\/td>\nWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        160<\/td>\nWindows Ancillary Function Driver for WinSock<\/td>\nCVE-2025-59242<\/a><\/td>\nWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        161<\/td>\nWindows Authentication Methods<\/td>\nCVE-2025-59277<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        162<\/td>\nWindows Authentication Methods<\/td>\nCVE-2025-59278<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        163<\/td>\nWindows Authentication Methods<\/td>\nCVE-2025-59275<\/a><\/td>\nWindows Authentication Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        164<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55337<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        165<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55332<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        166<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55333<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        167<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55330<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        168<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55338<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        169<\/td>\nWindows BitLocker<\/td>\nCVE-2025-55682<\/a><\/td>\nWindows BitLocker Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        170<\/td>\nWindows Bluetooth Service<\/td>\nCVE-2025-59290<\/a><\/td>\nWindows Bluetooth Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        171<\/td>\nWindows Bluetooth Service<\/td>\nCVE-2025-58728<\/a><\/td>\nWindows Bluetooth Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        172<\/td>\nWindows Bluetooth Service<\/td>\nCVE-2025-59289<\/a><\/td>\nWindows Bluetooth Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        173<\/td>\nWindows Cloud Files Mini Filter Driver<\/td>\nCVE-2025-55680<\/a><\/td>\nWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        174<\/td>\nWindows Cloud Files Mini Filter Driver<\/td>\nCVE-2025-55336<\/a><\/td>\nWindows Cloud Files Mini Filter Driver Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        175<\/td>\nWindows COM<\/td>\nCVE-2025-58725<\/a><\/td>\nWindows COM+ Event System Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        176<\/td>\nWindows Connected Devices Platform Service<\/td>\nCVE-2025-58727<\/a><\/td>\nWindows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        177<\/td>\nWindows Core Shell<\/td>\nCVE-2025-59185<\/a><\/td>\nNTLM Hash Disclosure Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        178<\/td>\nWindows Core Shell<\/td>\nCVE-2025-59244<\/a><\/td>\nNTLM Hash Disclosure Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        179<\/td>\nWindows Cryptographic Services<\/td>\nCVE-2025-58720<\/a><\/td>\nWindows Cryptographic Services Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        180<\/td>\nWindows Device Association Broker service<\/td>\nCVE-2025-50174<\/a><\/td>\nWindows Device Association Broker Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        181<\/td>\nWindows Device Association Broker service<\/td>\nCVE-2025-55677<\/a><\/td>\nWindows Device Association Broker Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        182<\/td>\nWindows Digital Media<\/td>\nCVE-2025-53150<\/a><\/td>\nWindows Digital Media Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        183<\/td>\nWindows Digital Media<\/td>\nCVE-2025-50175<\/a><\/td>\nWindows Digital Media Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        184<\/td>\nWindows DirectX<\/td>\nCVE-2025-55678<\/a><\/td>\nDirectX Graphics Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        185<\/td>\nWindows DirectX<\/td>\nCVE-2025-55698<\/a><\/td>\nDirectX Graphics Kernel Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        186<\/td>\nWindows DWM<\/td>\nCVE-2025-58722<\/a><\/td>\nMicrosoft DWM Core Library Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        187<\/td>\nWindows DWM<\/td>\nCVE-2025-55681<\/a><\/td>\nDesktop Windows Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        188<\/td>\nWindows DWM Core Library<\/td>\nCVE-2025-59255<\/a><\/td>\nWindows DWM Core Library Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        189<\/td>\nWindows DWM Core Library<\/td>\nCVE-2025-59254<\/a><\/td>\nMicrosoft DWM Core Library Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        190<\/td>\nWindows Error Reporting<\/td>\nCVE-2025-55692<\/a><\/td>\nWindows Error Reporting Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        191<\/td>\nWindows Error Reporting<\/td>\nCVE-2025-55694<\/a><\/td>\nWindows Error Reporting Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        192<\/td>\nWindows ETL Channel<\/td>\nCVE-2025-59197<\/a><\/td>\nWindows ETL Channel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        193<\/td>\nWindows Failover Cluster<\/td>\nCVE-2025-59188<\/a><\/td>\nMicrosoft Failover Cluster Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        194<\/td>\nWindows Failover Cluster<\/td>\nCVE-2025-47979<\/a><\/td>\nMicrosoft Failover Cluster Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        195<\/td>\nWindows File Explorer<\/td>\nCVE-2025-59214<\/a><\/td>\nMicrosoft Windows File Explorer Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        196<\/td>\nWindows File Explorer<\/td>\nCVE-2025-58739<\/a><\/td>\nMicrosoft Windows File Explorer Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        197<\/td>\nWindows Health and Optimized Experiences Service<\/td>\nCVE-2025-59241<\/a><\/td>\nWindows Health and Optimized Experiences Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        198<\/td>\nWindows Hello<\/td>\nCVE-2025-53139<\/a><\/td>\nWindows Hello Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        199<\/td>\nWindows High Availability Services<\/td>\nCVE-2025-59184<\/a><\/td>\nStorage Spaces Direct Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        200<\/td>\nWindows Hyper-V<\/td>\nCVE-2025-55328<\/a><\/td>\nWindows Hyper-V Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        201<\/td>\nWindows Kernel<\/td>\nCVE-2025-55679<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        202<\/td>\nWindows Kernel<\/td>\nCVE-2025-55683<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        203<\/td>\nWindows Kernel<\/td>\nCVE-2025-59207<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        204<\/td>\nWindows Kernel<\/td>\nCVE-2025-55334<\/a><\/td>\nWindows Kernel Security Feature Bypass Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        205<\/td>\nWindows Kernel<\/td>\nCVE-2025-59186<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        206<\/td>\nWindows Kernel<\/td>\nCVE-2025-55693<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        207<\/td>\nWindows Kernel<\/td>\nCVE-2025-59194<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        208<\/td>\nWindows Kernel<\/td>\nCVE-2025-59187<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        209<\/td>\nWindows Kernel<\/td>\nCVE-2025-50152<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        210<\/td>\nWindows Kernel<\/td>\nCVE-2025-55699<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        211<\/td>\nWindows Local Session Manager (LSM)<\/td>\nCVE-2025-58729<\/a><\/td>\nWindows Local Session Manager (LSM) Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        212<\/td>\nWindows Local Session Manager (LSM)<\/td>\nCVE-2025-59257<\/a><\/td>\nWindows Local Session Manager (LSM) Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        213<\/td>\nWindows Local Session Manager (LSM)<\/td>\nCVE-2025-59259<\/a><\/td>\nWindows Local Session Manager (LSM) Denial of Service Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        214<\/td>\nWindows Management Services<\/td>\nCVE-2025-59193<\/a><\/td>\nWindows Management Services Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        215<\/td>\nWindows Management Services<\/td>\nCVE-2025-59204<\/a><\/td>\nWindows Management Services Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        216<\/td>\nWindows MapUrlToZone<\/td>\nCVE-2025-59208<\/a><\/td>\nWindows MapUrlToZone Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        217<\/td>\nWindows NDIS<\/td>\nCVE-2025-55339<\/a><\/td>\nWindows Network Driver Interface Specification Driver Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        218<\/td>\nWindows NTFS<\/td>\nCVE-2025-55335<\/a><\/td>\nWindows NTFS Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        219<\/td>\nWindows NTLM<\/td>\nCVE-2025-59284<\/a><\/td>\nWindows NTLM Spoofing Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        220<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55331<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        221<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55689<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        222<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55685<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        223<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55686<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        224<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55690<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        225<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55684<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        226<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55688<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        227<\/td>\nWindows PrintWorkflowUserSvc<\/td>\nCVE-2025-55691<\/a><\/td>\nWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        228<\/td>\nWindows Push Notification Core<\/td>\nCVE-2025-59209<\/a><\/td>\nWindows Push Notification Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        229<\/td>\nWindows Push Notification Core<\/td>\nCVE-2025-59211<\/a><\/td>\nWindows Push Notification Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        230<\/td>\nWindows Remote Access Connection Manager<\/td>\nCVE-2025-59230<\/a><\/td>\nWindows Remote Access Connection Manager Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        231<\/td>\nWindows Remote Desktop<\/td>\nCVE-2025-58737<\/a><\/td>\nRemote Desktop Protocol Remote Code Execution Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        232<\/td>\nWindows Remote Desktop Protocol<\/td>\nCVE-2025-55340<\/a><\/td>\nWindows Remote Desktop Protocol Security Feature Bypass<\/td>\nImportant<\/td>\n<\/tr>\n
        233<\/td>\nWindows Remote Desktop Services<\/td>\nCVE-2025-59202<\/a><\/td>\nWindows Remote Desktop Services Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        234<\/td>\nWindows Remote Procedure Call<\/td>\nCVE-2025-59502<\/a><\/td>\nRemote Procedure Call Denial of Service Vulnerability<\/td>\nModerate<\/td>\n<\/tr>\n
        235<\/td>\nWindows Resilient File System (ReFS)<\/td>\nCVE-2025-55687<\/a><\/td>\nWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        236<\/td>\nWindows Resilient File System (ReFS) Deduplication Service<\/td>\nCVE-2025-59210<\/a><\/td>\nWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        237<\/td>\nWindows Resilient File System (ReFS) Deduplication Service<\/td>\nCVE-2025-59206<\/a><\/td>\nWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        238<\/td>\nWindows Routing and Remote Access Service (RRAS)<\/td>\nCVE-2025-58717<\/a><\/td>\nWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        239<\/td>\nWindows Routing and Remote Access Service (RRAS)<\/td>\nCVE-2025-55700<\/a><\/td>\nWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        240<\/td>\nWindows Secure Boot<\/td>\nCVE-2025-47827<\/a><\/td>\nMITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11<\/td>\nImportant<\/td>\n<\/tr>\n
        241<\/td>\nWindows Server Update Service<\/td>\nCVE-2025-59287<\/a><\/td>\nWindows Server Update Service (WSUS) Remote Code Execution Vulnerability<\/td>\nCritical<\/td>\n<\/tr>\n
        242<\/td>\nWindows SMB Client<\/td>\nCVE-2025-59280<\/a><\/td>\nWindows SMB Client Tampering Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        243<\/td>\nWindows SMB Server<\/td>\nCVE-2025-58726<\/a><\/td>\nWindows SMB Server Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        244<\/td>\nWindows SSDP Service<\/td>\nCVE-2025-59196<\/a><\/td>\nWindows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        245<\/td>\nWindows StateRepository API<\/td>\nCVE-2025-59203<\/a><\/td>\nWindows State Repository API Server File Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        246<\/td>\nWindows Storage Management Provider<\/td>\nCVE-2025-55325<\/a><\/td>\nWindows Storage Management Provider Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        247<\/td>\nWindows Taskbar Live<\/td>\nCVE-2025-59294<\/a><\/td>\nWindows Taskbar Live Preview Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        248<\/td>\nWindows USB Video Driver<\/td>\nCVE-2025-55676<\/a><\/td>\nWindows USB Video Class System Driver Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        249<\/td>\nWindows Virtualization-Based Security (VBS) Enclave<\/td>\nCVE-2025-53717<\/a><\/td>\nWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        250<\/td>\nWindows WLAN Auto Config Service<\/td>\nCVE-2025-55695<\/a><\/td>\nWindows WLAN AutoConfig Service Information Disclosure Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        251<\/td>\nXbox<\/td>\nCVE-2025-53768<\/a><\/td>\nXbox IStorageService Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n
        252<\/td>\nXBox Gaming Services<\/td>\nCVE-2025-59281<\/a><\/td>\nXbox Gaming Services Elevation of Privilege Vulnerability<\/td>\nImportant<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
        \nWhiteHat<\/i><\/b>\u200b<\/div>\n
        Theo: https:\/\/whitehat.vn\/threads\/microsoft-patch-tuesday-thang-10-2025-va-172-lo-hong-6-zero-day.18838\/<\/a><\/i><\/div>\n","protected":false},"excerpt":{"rendered":"

        Microsoft v\u1eeba ph\u00e1t h\u00e0nh b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt \u0111\u1ecbnh k\u1ef3 Patch Tuesday th\u00e1ng 10 v\u1edbi 172 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c v\u00e1, bao g\u1ed3m 6 l\u1ed7 h\u1ed5ng zero-day \u0111ang b\u1ecb tin t\u1eb7c khai th\u00e1c t\u00edch c\u1ef1c. \u0110\u00e2y c\u0169ng l\u00e0 c\u1ed9t m\u1ed1c \u0111\u1eb7c bi\u1ec7t khi Windows 10 ch\u00ednh th\u1ee9c k\u1ebft th\u00fac v\u00f2ng \u0111\u1eddi h\u1ed7 tr\u1ee3 […]<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[],"class_list":["post-10533","post","type-post","status-publish","format-standard","hentry","category-tin-tuc-cua-vien"],"_links":{"self":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10533","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/comments?post=10533"}],"version-history":[{"count":0,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10533\/revisions"}],"wp:attachment":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/media?parent=10533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/categories?post=10533"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/tags?post=10533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}