Information Disclosure
The latest Information Disclosure coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-55242: Microsoft Flags Xbox Information Disclosure Exploit – Admins Must Patch Immediately
Microsoft has published a security advisory for CVE-2025-55242, an information disclosure vulnerability that could allow unauthorized actors to access sensitive data over a network. The bug, which...
Delta Electronics Patches XXE Bug in EIP Builder, CISA Warns Critical Manufacturing Operators to Upgrade Now
A newly disclosed vulnerability in Delta Electronics’ EIP Builder engineering tool can allow attackers to exfiltrate sensitive files from industrial engineering workstations, and the U.S....
Mitsubishi Says No Fix Coming for MELSEC iQ-F Cleartext Credential Flaw (CVE-2025-7731)
A serious vulnerability in Mitsubishi Electric's MELSEC iQ-F series programmable logic controllers leaves credentials exposed in plaintext network traffic, and the vendor has declared it will not...
California Man Sues Microsoft to Block Windows 10 Support Cutoff, Alleges Forced Obsolescence and AI Monopoly
A California man is suing Microsoft, demanding a judge block the company from cutting off free security updates for Windows 10 on October 14, 2025, in a case that could reshape how tech giants retire...
India’s CERT-In Issues High-Risk Alert as Microsoft’s August Patch Fixes Zero-Day and 110+ Other Vulnerabilities
India’s Computer Emergency Response Team (CERT-In) issued a high-risk advisory on August 18, 2025, warning that millions of Windows, Office, and Azure users face looming danger unless they...
Unpatched Flaw in Siemens SINEC Traffic Analyzer Puts OT Networks at Risk of Takeover
Siemens disclosed a cluster of seven high-severity vulnerabilities in its SINEC Traffic Analyzer, a PROFINET monitoring appliance, that together could allow attackers to crash the system, escalate...
Rockwell Automation Patches FactoryTalk Action Manager Vulnerability That Broadcasts API Tokens
Rockwell Automation has confirmed a high-severity information disclosure vulnerability in its FactoryTalk Action Manager software that broadcasts reusable API tokens over local WebSocket channels,...
Microsoft's CVE-2025-53793 Advisory: Azure Stack Hub Authentication Flaw Exposes Sensitive Data
Microsoft has published an urgent security advisory for CVE-2025-53793, an improper authentication vulnerability in Azure Stack Hub that could allow unauthenticated attackers to access sensitive...
Critical RRAS Vulnerability Leaks Windows Server Memory—Patch CVE-2025-50157 Immediately
Microsoft has issued an urgent security update for a memory disclosure flaw in Windows Routing and Remote Access Service (RRAS) that could let attackers remotely extract sensitive data from unpatched...
CVE-2025-53765: Microsoft Warns of Azure Stack Hub Data Leak Through Authorized Local Access
Microsoft’s Security Response Center has published an advisory for CVE-2025-53765, an information disclosure vulnerability in Azure Stack Hub that permits an attacker with local authorization to...
Microsoft Office Buffer Over-Read Bugs Strike Word and Excel: What Enterprises Must Patch Now
Microsoft has rolled out crucial patches for two high-severity buffer over-read vulnerabilities in Microsoft Word and Excel, both enabling local attackers to extract sensitive memory contents. The...
Microsoft Patches Dynamics 365 On-Prem Flaw CVE-2025-53728 That Exposes Sensitive Data
Microsoft has released a security update to fix an information disclosure vulnerability in Dynamics 365 on-premises versions, tracked as CVE-2025-53728. The flaw, classified as allowing an...