CVE-2025-59512

by | Nov 12, 2025

Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.

CVE-2025-59511

by | Nov 12, 2025

External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally.

CVE-2025-59510

by | Nov 12, 2025

Improper link resolution before file access (‘link following’) in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.

CVE-2025-59509

by | Nov 12, 2025

Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally.

CVE-2025-59508

by | Nov 12, 2025

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Speech allows an authorized attacker to elevate privileges locally.