Windows - CVE CyberSecurity Database News (Page 5)

Oct 17, 2025 RCE XXE Windows Java Apache

CVE-2024-31573 - How a Simple XMLUnit for Java Bug Can Open the Door to Remote Code Execution

Summary: In March 2024, a new vulnerability was identified in XMLUnit for Java—CVE-2024-31573. This issue, lurking since the early days of the library and

Oct 14, 2025 Windows Microsoft Java

CVE-2025-59287 - Exploiting WSUS Deserialization of Untrusted Data for Remote Code Execution

--- Overview A critical new vulnerability, CVE-2025-59287, has rocked system administrators: via deserialization of untrusted data in Windows Server Update Services (WSUS), attackers can execute

Oct 14, 2025 Windows Microsoft

CVE-2025-59230 - Exploiting Improper Access Control in Windows Remote Access Connection Manager

In June 2025, a new Windows vulnerability surfaced under the ID CVE-2025-59230. This flaw lets attackers elevate their privileges locally by exploiting improper access control

Oct 14, 2025 Windows Microsoft Exploit

CVE-2025-59184 - How Windows High Availability Services Can Leak Sensitive Information to Local Attackers

On May 18, 2025, a new vulnerability tracked as CVE-2025-59184 was disclosed regarding information exposure in Windows High Availability (HA) Services. While HA Services help

Oct 14, 2025 Windows Microsoft API Exploit

CVE-2025-55695 - Out-of-Bounds Read in Windows WLAN Auto Config Service Enables Local Info Disclosure

In June 2025, a new Windows vulnerability was uncovered and assigned CVE-2025-55695. This bug affects the Windows WLAN Auto Config Service (also known as wlansvc)