CVE-2025-21221 Windows Telephony Service Remote Code Execution Vulnerability
Published April 8, 2025
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center Blog Alerts
CVE-2025-29793 Microsoft SharePoint Remote Code Execution Vulnerability
Published April 8, 2025
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-27478 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Published April 8, 2025
Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
CVE-2025-26669 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Published April 8, 2025
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Chromium: CVE-2025-3073 Inappropriate implementation in Autofill
Published April 3, 2025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
CVE-2025-29815 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published April 3, 2025
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Chromium: CVE-2025-3067 Inappropriate implementation in Custom Tabs
Published April 3, 2025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
Chromium: CVE-2025-3068 Inappropriate implementation in Intents
Published April 3, 2025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
Chromium: CVE-2025-3069 Inappropriate implementation in Extensions
Published April 3, 2025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
Chromium: CVE-2025-3070 Insufficient validation of untrusted input in Extensions
Published April 3, 2025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
