Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709) ยท updates https://pwn.watch/i/microsoft-windows-cve-2025-30397 CVE-2025-30397: Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL. CVE-2025-30400: Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVE-2025-32701: Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVE-2025-32706: Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally. CVE-2025-32709: Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator. Added to CISA KEV on 2025-05-13. en Tue, 13 May 2025 00:00:00 GMT Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-30397 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 https://pwn.watch/i/microsoft-windows-cve-2025-30397#2025-05-13-01cddb14 Tue, 13 May 2025 00:00:00 GMT high <p>Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-30397 to the KEV catalog (due 2025-06-03).</p> Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-30400 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 https://pwn.watch/i/microsoft-windows-cve-2025-30397#2025-05-13-61108c13 Tue, 13 May 2025 00:00:00 GMT high <p>Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-30400 to the KEV catalog (due 2025-06-03).</p> Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32701 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 https://pwn.watch/i/microsoft-windows-cve-2025-30397#2025-05-13-e9df3bd3 Tue, 13 May 2025 00:00:00 GMT high <p>Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32701 to the KEV catalog (due 2025-06-03).</p> Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32706 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 https://pwn.watch/i/microsoft-windows-cve-2025-30397#2025-05-13-f79011a0 Tue, 13 May 2025 00:00:00 GMT high <p>Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32706 to the KEV catalog (due 2025-06-03).</p> Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32709 to the KEV catalog (due 2025-06-03). https://pwn.watch/i/microsoft-windows-cve-2025-30397 https://pwn.watch/i/microsoft-windows-cve-2025-30397#2025-05-13-0da14edb Tue, 13 May 2025 00:00:00 GMT high <p>Microsoft Windows: 5 exploited vulnerabilities (CVE-2025-30397, CVE-2025-30400, CVE-2025-32701, CVE-2025-32706, CVE-2025-32709): CISA added CVE-2025-32709 to the KEV catalog (due 2025-06-03).</p>