CVE-2025-48819

High CVSS: 7.1

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

Vendor

Microsoft

Product

Windows 10 1507

CWE

CWE-591

Yayın Tarihi

2025-07-08 17:15:46

Güncelleme

2025-07-15 14:39:12

Source Identifier

secure@microsoft.com

KEV Date Added

Kategoriler

CWE-591 Windows 10 1507 HIGH Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48819

Benzer Kayıtlar

Critical

CVE-2026-33107

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a netw…

Critical

CVE-2026-33105

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over…

Critical

CVE-2026-32213

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Critical

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information…

High

CVE-2026-32173

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Critical

CVE-2026-26135

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to ele…