Linked CVE review

Deploy Microsoft ESU security update KB5066873

Linked CVEs: 50
Confirmed exploited: 3
PoC or lab evidence: 1
Maximum CVSS: 9.8

Evidence is kept separate

Confirmed exploitation, public exploit material, EPSS probability and CVSS severity answer different questions. “No confirmation recorded” means the checked sources do not currently confirm exploitation. It is not proof that exploitation has not occurred.

50 of 50 linked CVEs shown

Confirmed exploitedCVSS above 9.0

CVE and description	Severity	Exploit reality	Forecast and access	Remediation
CVE-2025-47827 Immediate evidence IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.	4.6 · CVSS 3.1 · MediumSource: CISA ADP	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-10-14.Public exploit referencedA structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.	EPSS: 4.93% · 91.9th percentileForecast date: 2026-10-08PHYSICAL · LOW complexity · NONE privileges · NONE user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-11-04 as the remediation due date.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24990 Immediate evidence Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.	7.8 · CVSS 3.1 · HighSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-10-14.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 6.37% · 93.5th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-11-04 as the remediation due date.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59230 Immediate evidence Microsoft Windows Improper Access Control Vulnerability Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2025-10-14.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 2.66% · 85.2th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Patch nowCISA confirms exploitation in the wild and lists 2025-11-04 as the remediation due date.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2016-9535 Critical technical severity n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."	9.8 · CVSS 3.1 · CriticalSource: CISA ADP	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 4.77% · 91.7th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · NONE user interaction	Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Patch available. An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
CVE-2025-55692 Scheduled assessment Windows Error Reporting Service Elevation of Privilege Vulnerability Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 3.38% · 88.5th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-24052 Scheduled assessment Windows Agere Modem Driver Elevation of Privilege Vulnerability Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 2.45% · 83.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59295 Scheduled assessment Windows URL Parsing Remote Code Execution Vulnerability Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.92% · 79.2th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58726 Scheduled assessment Windows SMB Server Elevation of Privilege Vulnerability Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.	7.5 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.01% · 62.2th percentileForecast date: 2026-10-08NETWORK · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59282 Scheduled assessment Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.61% · 47.6th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58718 Scheduled assessment Remote Desktop Client Remote Code Execution Vulnerability Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.	8.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.60% · 46.8th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59208 Scheduled assessment Windows MapUrlToZone Information Disclosure Vulnerability Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.	7.1 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.50% · 40.9th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-25004 Scheduled assessment PowerShell Elevation of Privilege Vulnerability Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.	7.3 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.48% · 39.4th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58732 Scheduled assessment Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.48% · 39.3th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58735 Scheduled assessment Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.48% · 39.3th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59201 Scheduled assessment Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.45% · 37.4th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-55701 Scheduled assessment Windows Authentication Elevation of Privilege Vulnerability Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.41% · 33.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59242 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.41% · 33.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59277 Scheduled assessment Windows Authentication Elevation of Privilege Vulnerability Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.38% · 29.9th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58737 Scheduled assessment Remote Desktop Protocol Remote Code Execution Vulnerability Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.35% · 26.7th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58730 Scheduled assessment Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.35% · 26.6th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58733 Scheduled assessment Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.35% · 26.6th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58736 Scheduled assessment Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.35% · 26.6th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · REQUIRED user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59202 Scheduled assessment Windows Remote Desktop Services Elevation of Privilege Vulnerability Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.35% · 26.1th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59187 Scheduled assessment Windows Kernel Elevation of Privilege Vulnerability Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.30% · 21.4th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-55678 Scheduled assessment DirectX Graphics Kernel Elevation of Privilege Vulnerability Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.29% · 20.0th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59275 Scheduled assessment Windows Authentication Elevation of Privilege Vulnerability Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.27% · 18.1th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59278 Scheduled assessment Windows Authentication Elevation of Privilege Vulnerability Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.27% · 18.1th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58714 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	7.8 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.27% · 18.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-55335 Scheduled assessment Windows NTFS Elevation of Privilege Vulnerability Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.	7.4 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.26% · 16.7th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-55687 Scheduled assessment Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally.	7.4 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.26% · 16.7th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · NONE privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59196 Scheduled assessment Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.26% · 16.3th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58725 Scheduled assessment Windows COM+ Event System Service Elevation of Privilege Vulnerability Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59205 Scheduled assessment Windows Graphics Component Elevation of Privilege Vulnerability Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.	7.0 · CVSS 3.1 · HighSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.20% · 8.8th percentileForecast date: 2026-10-08LOCAL · HIGH complexity · LOW privileges · NONE user interaction	Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59214 Scheduled assessment Microsoft Windows File Explorer Spoofing Vulnerability Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.84% · 78.4th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59259 Scheduled assessment Windows Local Session Manager (LSM) Denial of Service Vulnerability Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.51% · 73.7th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59185 Scheduled assessment NTLM Hash Disclosure Spoofing Vulnerability External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.15% · 65.8th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58729 Scheduled assessment Windows Local Session Manager (LSM) Denial of Service Vulnerability Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 1.06% · 63.4th percentileForecast date: 2026-10-08NETWORK · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-55700 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.97% · 60.9th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58717 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.97% · 60.9th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-58739 Scheduled assessment Microsoft Windows File Explorer Spoofing Vulnerability Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.82% · 55.9th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59244 Scheduled assessment NTLM Hash Disclosure Spoofing Vulnerability External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.	6.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.82% · 55.9th percentileForecast date: 2026-10-08NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59211 Scheduled assessment Windows Push Notification Information Disclosure Vulnerability Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.61% · 47.7th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59258 Scheduled assessment Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally.	6.2 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.60% · 46.8th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59190 Scheduled assessment Windows Search Service Denial of Service Vulnerability Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.50% · 41.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59198 Scheduled assessment Windows Search Service Denial of Service Vulnerability Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.	5.0 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · REQUIRED user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59209 Scheduled assessment Windows Push Notification Information Disclosure Vulnerability Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.47% · 38.5th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59280 Scheduled assessment Windows SMB Client Tampering Vulnerability Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.	3.1 · CVSS 3.1 · LowSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.46% · 37.7th percentileForecast date: 2026-10-08NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction	ScheduledLow technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59188 Scheduled assessment Microsoft Failover Cluster Information Disclosure Vulnerability Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.43% · 35.6th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-55695 Scheduled assessment Windows WLAN AutoConfig Service Information Disclosure Vulnerability Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.41% · 33.0th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2025-59253 Scheduled assessment Windows Search Service Denial of Service Vulnerability Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally.	5.5 · CVSS 3.1 · MediumSource: CNA	No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.	EPSS: 0.34% · 25.1th percentileForecast date: 2026-10-08LOCAL · LOW complexity · LOW privileges · NONE user interaction	ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.