CVE-2025-49730: Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

CVE-2025-49729: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-49724: Windows Connected Devices Platform Service Remote Code Execution Vulnerability

CVE-2025-49722: Windows Print Spooler Denial of Service Vulnerability

CVE-2025-49706: Microsoft SharePoint Server Spoofing Vulnerability

**According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?**

An attacker must send the user a malicious file and convince them to open it.

Headline

CVE-2025-49700: Microsoft Word Remote Code Execution Vulnerability

Microsoft Security Response Center: Latest News