🐛 COMMON VULNERABILITIES AND EXPOSURES 55[−]
11 FebCVE-2025-21188 Azure Network Watcher VM Extension Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21206 Visual Studio Installer Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21351 Windows Active Directory Domain Services API Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21352 Internet Connection Sharing (ICS) Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21368 Microsoft Digest Authentication Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21369 Microsoft Digest Authentication Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21375 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21376 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21379 DHCP Client Service Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21383 Microsoft Excel Information Disclosure VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21182 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21183 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21391 Windows Storage Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21418 Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21419 Windows Setup Files Cleanup Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21420 Windows Disk Cleanup Tool Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2023-32002 HackerOne: CVE-2023-32002 Node.js `Module._load()` policy Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-24036 Microsoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-24039 Visual Studio Code Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21259 Microsoft Outlook Spoofing VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21194 Microsoft Surface Security Feature Bypass VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21208 Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21406 Windows Telephony Service Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21407 Windows Telephony Service Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21410 Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21190 Windows Telephony Service Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21200 Windows Telephony Service Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21201 Windows Telephony Server Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21337 Windows NTFS Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21347 Windows Deployment Services Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21349 Windows Remote Desktop Configuration Service Tampering VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21350 Windows Kerberos Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21358 Windows Core Messaging Elevation of Privileges VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21367 Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21371 Windows Telephony Service Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21377 NTLM Hash Disclosure Spoofing VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21381 Microsoft Excel Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21386 Microsoft Excel Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21387 Microsoft Excel Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21390 Microsoft Excel Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21392 Microsoft Office Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21394 Microsoft Excel Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21397 Microsoft Office Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21400 Microsoft SharePoint Server Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21179 DHCP Client Service Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21181 Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21184 Windows Core Messaging Elevation of Privileges VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21212 Internet Connection Sharing (ICS) Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21216 Internet Connection Sharing (ICS) Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21254 Internet Connection Sharing (ICS) Denial of Service VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21322 Microsoft PC Manager Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21414 Windows Core Messaging Elevation of Privileges VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21373 Windows Installer Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-24042 Visual Studio Code JS Debug Extension Elevation of Privilege VulnerabilityInformation published.MSRC.MICROSOFT.COM
11 FebCVE-2025-21198 Microsoft High Performance Compute (HPC) Pack Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
⚠️ VULNERABILITY DISCLOSURE 3[−]
11 FebCritical Patches Issued for Microsoft Products, February 11, 2025Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, o…CISECURITY.ORG
11 FebLandAirSea - 337,373 breached accountsIn January 2025, the GPS tracking service LandAirSea suffered a data breach that exposed 337k unique customer email addresses alongside names, usernames and password hashes. The breach also exposed partial credit card data (card type, last 4 digits and expiration), and GPS device…HAVEIBEENPWNED.COM
11 FebBeing Overlord on the Steam Deck with 1 ByteIn this blog post we explain the consequences of asking our R&D boss for a Steam Deck as a Christmas gift. It involves a couple of vulnerabilities, limited primitives, challenging exploitation and a long disclosure process.QUARKSLAB.COM
📡 INFOSEC NEWS 2[−]
11 FebHow AI-driven identify fraud is causing havocDeepfake fraud, synthetic identities, and AI-powered scams make identity theft harder to detect and prevent – here's how to fight backWELIVESECURITY.COM