Security
Headlines
HeadlinesLatestCVEs

Tag

#windows

CVE-2025-27735: Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

**What kind of security feature could be bypassed by successfully exploiting this vulnerability?** An attacker who successfully exploited this vulnerability could bypass the Virtualization-based Security feature.

Microsoft Security Response Center
#vulnerability#windows#Windows Virtualization-Based Security (VBS) Enclave#Security Vulnerability
CVE-2025-27732: Windows Graphics Component Elevation of Privilege Vulnerability

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2025-27727: Windows Installer Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.