Vulnerability
The latest Vulnerability coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-59245: Critical SharePoint Privilege Escalation Vulnerability Analysis
Microsoft has disclosed a critical elevation of privilege vulnerability in SharePoint Online, designated CVE-2025-59245, that requires immediate attention from organizations worldwide. This security...
CISA Warns iCam365 Cameras Expose Live Video Feeds to Anyone on Your Network
Two iCam365 security camera models are vulnerable to unauthenticated access that could expose live video feeds and device configurations, the U.S. Cybersecurity and Infrastructure Security Agency...
FortiWeb CVE-2025-64446: Critical WAF Flaw Actively Exploited - Patch Now
The Cybersecurity and Infrastructure Security Agency (CISA) has urgently added a critical Fortinet FortiWeb vulnerability to its Known Exploited Vulnerabilities catalog, signaling active in-the-wild...
CVE-2025-64446 FortiWeb Path Traversal: Critical Vulnerability Now in KEV Catalog
Fortinet has issued an urgent security advisory for a critical path traversal vulnerability in FortiWeb web application firewalls that has already been added to CISA's Known Exploited Vulnerabilities...
MSHTML CVE-2024-43573: Critical IE Spoofing Vulnerability Requires Immediate Patching
Microsoft has issued an urgent security advisory for CVE-2024-43573, a critical spoofing vulnerability in the MSHTML engine that affects Windows systems despite Internet Explorer's official...
Microsoft Flags Critical DirectX Kernel Flaw, But Patch Verification Is Tricky
Microsoft has warned of a high-severity vulnerability in the DirectX Graphics Kernel, tracked as CVE-2025-59506, that could let attackers escalate privileges to the SYSTEM level. The advisory...
CVE-2025-11840: Critical Binutils Vulnerability Threatens Development Tools
A newly discovered security vulnerability in GNU Binutils has sent shockwaves through the development community, with CVE-2025-11840 exposing systems to potential exploitation through an...
Linux KVM SVM Fastpath Fix Prevents Host Instability Issues
A critical Linux kernel vulnerability affecting KVM's SVM (Kernel-based Virtual Machine Secure Virtual Machine) implementation has been patched, addressing a subtle but potentially serious issue that...
WSUS CVE-2025-59287: Critical Vulnerability and Emergency Response Guide
Microsoft has issued an emergency out-of-band security update addressing a critical vulnerability in Windows Server Update Services (WSUS) that could allow attackers to compromise enterprise update...
Critical WSUS RCE Vulnerability CVE-2025-59287: Patch Now
Microsoft has issued an urgent security alert for a critical remote code execution vulnerability in Windows Server Update Services (WSUS) that's being actively exploited in the wild. Designated as...
CISA KEV Catalog Adds Critical Magento & WSUS Vulnerabilities: What You Need to Know
The Cybersecurity and Infrastructure Security Agency (CISA) has escalated its security warnings by adding two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, signaling...
Microsoft Issues Emergency Patch for Critical WSUS RCE Flaw CVE-2025-59287
Microsoft has taken the extraordinary step of releasing an out-of-band emergency security update to address a critical remote code execution vulnerability in Windows Server Update Services (WSUS),...