A newly catalogued vulnerability in the Windows Graphics Kernel, tracked as CVE-2025-55236, is a time-of-check/time-of-use (TOCTOU) race condition that Microsoft warns can allow an authorized local attacker to execute code on an affected host; the vendor’s advisory identifies the flaw as a...
CVE-2025-54097 — Windows RRAS Information‑Disclosure Vulnerability
An in‑depth feature for security teams and administrators
Summary
What it is: An out‑of‑bounds read in the Windows Routing and Remote Access Service (RRAS) that can cause RRAS to disclose contents of memory to a remote...