Microsoft - CVE CyberSecurity Database News (Page 26)

Mar 11, 2025 Windows Microsoft API

CVE-2025-24035 - Sensitive Data Leak and Remote Code Execution in Windows Remote Desktop Services

*Published: June 2024 | By: SecureBytes Team* Overview In June 2024, Microsoft quietly patched a critical new vulnerability in Windows Remote Desktop Services, tracked as CVE-2025-24035.

Mar 11, 2025 Windows Microsoft API

CVE-2025-21247 - Bypassing Windows MapUrlToZone Path Security — Full Breakdown and Exploit Details

Published: June 2024 Severity: High Component: Windows MapUrlToZone API Overview A newly disclosed Windows vulnerability, CVE-2025-21247, highlights a serious issue in how the Windows MapUrlToZone

Mar 11, 2025 Windows Microsoft

CVE-2025-21180 - Heap-Based Buffer Overflow in Windows exFAT—How Attackers Can Exploit It

In June 2024, security researchers discovered a new vulnerability impacting Microsoft Windows systems: CVE-2025-21180. This flaw lies within the exFAT file system driver and can

Mar 11, 2025 Microsoft API Exploit

CVE-2025-27602 - How a Backoffice API Flaw Let Low-Privilege Umbraco Editors Access Restricted Content and Media

Umbraco is a wildly popular, open-source content management system (CMS) built on Microsoft’s .NET tech stack. Its easy-to-use “backoffice” panel helps content creators and

Mar 11, 2025 Microsoft API

CVE-2025-1550 - Arbitrary Code Execution Vulnerability in Keras Model.load_model Function

Keras is a popular high-level neural networks API written in Python, which is capable of running on top of TensorFlow, Microsoft Cognitive Toolkit, or Theano.