CVE-2025-49738: Microsoft PC Manager Elevation of Privilege Vulnerability

CVE-2025-49737: Microsoft Teams Elevation of Privilege Vulnerability

CVE-2025-49742: Windows Graphics Component Remote Code Execution Vulnerability

CVE-2025-49740: Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2025-47999: Windows Hyper-V Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges over a network.

Headline

CVE-2025-47972: Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News