Common Vulnerabilities and Exposures (CVE)

CVE-2025-27751

Feb 13, 2026 19:32:43 UTC

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-27743

Feb 13, 2026 19:32:43 UTC

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

CVE-2025-27749

Feb 13, 2026 19:32:42 UTC

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27747

Feb 13, 2026 19:32:42 UTC

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-27748

Feb 13, 2026 19:32:41 UTC

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27746

Feb 13, 2026 19:32:40 UTC

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27745

Feb 13, 2026 19:32:40 UTC

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27742

Feb 13, 2026 19:32:39 UTC

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.

CVE-2025-27744

Feb 13, 2026 19:32:38 UTC

Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2025-27741

Feb 13, 2026 19:32:38 UTC

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVE-2025-27740

Feb 13, 2026 19:32:37 UTC

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

CVE-2025-27479

Feb 13, 2026 19:32:37 UTC

Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

CVE-2025-27478

Feb 13, 2026 19:32:36 UTC

Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2025-27477

Feb 13, 2026 19:32:35 UTC

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

CVE-2025-27475

Feb 13, 2026 19:32:35 UTC

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.