8 April 2025

9 results · Clear filters · Feed

• High 7.5
  CVE-2025-29810 Public exploit

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 8, 2025
• High 8.1
  CVE-2025-27480 Public exploit EPSS 13%

  Windows Remote Desktop Services Remote Code Execution Vulnerability

  Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 8, 2025
• High 7.8
  CVE-2025-21204 Public exploit

  Windows Process Activation Elevation of Privilege Vulnerability

  Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 8, 2025
• High 7.8
  CVE-2025-29824 Exploited · Ransomware Public exploit EPSS 19%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 8, 2025

  KEV Apr 8, 2025
• High 7.8
  CVE-2025-27751 Public exploit

  Microsoft Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Apr 8, 2025
• High 8.8
  CVE-2025-27740 Public exploit

  Active Directory Certificate Services Elevation of Privilege Vulnerability

  Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 8, 2025
• High 7.5
  CVE-2025-26686 Public exploit

  Windows TCP/IP Remote Code Execution Vulnerability

  Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 8, 2025
• High 7.5
  CVE-2025-25227 Public exploit

  [20250402] - Joomla Core - MFA Authentication Bypass

  Insufficient state checks lead to a vector that allows to bypass 2FA checks.

  Joomla! Project Joomla! CMS joomla/joomla-cms Web / CMS Packagist
  Apr 8, 2025
• High 8.8
  CVE-2025-2807 Public exploit

  Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

  The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check in the mvl_setup_wizard_install_plugin() function in all versions up to, and including, 1.4.64. Thi…

  stylemix Motors – Car Dealership & Classified Listings Plugin Web / CMS
  Apr 8, 2025