Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2025-53770)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server.
Read MoreMicrosoft
Microsoft is a multinational technology company founded in 1975 by Bill Gates and Paul Allen. It is renowned for developing software products like the Windows operating system, Microsoft Office suite, and Azure cloud services. Microsoft also produces hardware, including the Xbox gaming console and Surface devices. With a strong presence in enterprise solutions, AI, and developer tools, Microsoft is a leader in the global tech industry. Its mission is to empower every person and organization on the planet to achieve more.
Microsoft PC Manager Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVE-2025-47993)
– This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft PC Manager.
Read MoreMicrosoft Windows win32kfull Integer Overflow Local Privilege Escalation Vulnerability (CVE-2025-49742)
– This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows.
Read MoreMicrosoft Windows AppX Deployment Service Link Following Local Privilege Escalation Vulnerability (CVE-2025-48820)
– This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows.
Read More
Microsoft WEBDAV Remote Code Execution Vulnerability (CVE-2025-33053)
– A newly discovered critical zero-day remote code execution (RCE) vulnerability in Microsoft Windows, identified as CVE-2025-33053, is being actively exploited by the Stealth Falcon advanced persistent threat (APT) group, also known as FruityArmor.
Read MoreMicrosoft Visual Studio initializeCommand Insufficient UI Warning Remote Code Execution Vulnerability (CVE-2025-47959)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio.
Read More
External Apps Can Exploit OneDrive Security Flaw
– Websites that support OneDrive file uploads—such as ChatGPT, Slack, Trello, ClickUp, Zoom, and others—can gain access to a user’s entire OneDrive account, not just the files selected for upload. This access may persist for extended periods.
Read More
What is bcrypt.dll in Microsoft Windows (RESOLVED)
bcrypt.dll is a legitimate Windows system file that is part of the Windows Cryptographic Primitives Library. Here’s what you need to know:
Read More
Elevation of Privilege Vulnerability in Visual Studio (CVE-2025-29813)
An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens.
Read More
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability (CVE-2025-24054)
CVE-2025-24054 is a vulnerability involving NTLM hash disclosure through spoofing, triggered by specially crafted .library-ms files.
Read More