CVE-2025-49728 — Microsoft PC Manager: Cleartext storage of sensitive information (Security‑feature bypass, local)
Summary (TL;DR)
Microsoft has assigned CVE‑2025‑49728 to a vulnerability in Microsoft PC Manager where sensitive information is stored in cleartext, enabling a local, unauthorized...
A newly catalogued vulnerability in the Windows Graphics Kernel, tracked as CVE-2025-55236, is a time-of-check/time-of-use (TOCTOU) race condition that Microsoft warns can allow an authorized local attacker to execute code on an affected host; the vendor’s advisory identifies the flaw as a...
Title: CVE-2025-49743 — Windows Graphics Component race-condition allows local privilege escalation: what admins need to know and do now
Summary
What it is: CVE-2025-49743 is an elevation-of-privilege (EoP) vulnerability in the Microsoft Graphics Component caused by a race condition (concurrent...