SafeBreach Labs CVE Discoveries

Browse the list of vulnerabilities uncovered by leading edge researchers on the SafeBreach Labs team. For more of their work, visit our Research Hub.

Date CVE ID CVSS CVSS (FULL) CVE DESCRIPTION NVD LINK NOTES
10/2025CVE-2025-591997.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:CSoftware Protection Platform (SPP) Elevation of Privilege VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59199
10/2025CVE-2025-592007.7CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:CData Sharing Service Spoofing VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59200
10/2025CVE-2025-595027.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:CRemote Procedure Call Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59502
7/2025CVE-2025-497603.5CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:CWindows Storage Spoofing VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49760
7/2025CVE-2025-497167.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:CWindows Netlogon Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49716
7/2025CVE-2025-497225.7CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:CWindows Print Spooler Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49722
6/2025CVE-2025-327247.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:CLocal Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32724
5/2025CVE-2025-299697.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:CMS-EVEN RPC Remote Code Execution VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29969
4/2025CVE-2025-266737.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:CWindows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26673
11/2024CVE-2024-106685.9CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/AU:N/R:U/V:D/RE:L/U:GreenAuth Bypass In QuickshareLinkhttps://www.cve.org/cverecord?id=CVE-2024-10668
8/2024CVE-2024-382027.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:CWindows Update Stack Elevation of Privilege VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202
8/2024CVE-2024-213026.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:CWindows Secure Kernel Mode Elevation of Privilege VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302
6/2024CVE-2024-382727.1CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:LAuth Bypass In Quick ShareLinkhttps://www.cve.org/cverecord?id=CVE-2024-38272
6/2024CVE-2024-382715.9CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:L/SA:LDenial Of Service In Quick ShareLinkhttps://www.cve.org/cverecord?id=CVE-2024-38271
11/2023CVE-2023-363967.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWindows Compressed Folder Remote Code Execution VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36396
12/2023CVE-2023-360107.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HMicrosoft Defender Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36010
7/2023CVE-2023-320547.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HVolume Shadow Copy Elevation of Privilege VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32054
4/2023CVE-2023-249345.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NMicrosoft Defender Security Feature Bypass VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24934
4/2023CVE-2023-248607.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWindows Defender Denial of ServiceLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24860
3/2023CVE-2023-234116.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HWindows Hyper-V Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23411
12/2022CVE-2022-457977.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HArbitrary File Deletion Local Privilege Escalation VulnerabilityLinkhttps://success.trendmicro.com/dcx/s/solution/000291830?language=en_US
12/2022TBAArbitrary File Deletion Local Privilege Escalation Vulnerabilityhttps://www.safebreach.com/resources/safebreach-labs-researcher-discovers-multiple-zero-day-vulnerabilities/
11/2022CVE-2022-41738.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HArbitrary File Deletion Local Privilege Escalation VulnerabilityLinkhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4173
11/2022CVE-2022-380156.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HWindows Hyper-V Denial of Service VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-38015
10/2022CVE-2022-379717.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HMicrosoft Windows Defender Elevation of Privilege VulnerabilityLinkhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37971