Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Office zero-day CVE-2025-21397 exploited in active attacks, patch now
Microsoft Office users face a critical security threat with the newly disclosed CVE-2025-21397, a remote code execution (RCE) vulnerability that could allow attackers to take control of affected...
Critical Excel RCE Flaw CVE-2025-21394 Exploited; Microsoft Issues Emergency Patch
Microsoft Excel users face a new critical security threat with the discovery of CVE-2025-21394, a remote code execution (RCE) vulnerability that could allow attackers to take control of affected...
Critical Office RCE flaw CVE-2025-21392: Patch now for full system risk
Critical Microsoft Office Security Advisory: RCE Vulnerability CVE-2025-21392 Revealed Microsoft has issued a critical security advisory regarding a newly discovered Remote Code Execution (RCE)...
Patch Excel Now: CVE-2025-21390 Zero-Day Enables Remote Code Execution
CVE-2025-21390: Major Microsoft Excel Vulnerability and How to Protect Yourself A critical vulnerability, designated CVE-2025-21390, has been discovered in Microsoft Excel, posing a significant risk...
Excel zero-day CVE-2025-21387 with 9.8 CVSS exploited in attacks.
CVE-2025-21387: Critical RCE Vulnerability in Microsoft Excel Microsoft has issued an urgent security advisory regarding CVE-2025-21387, a critical Remote Code Execution (RCE) vulnerability affecting...
Excel Zero-Day CVE-2025-21386 Lets Attackers Hijack Systems via Malicious Spreadsheets
CVE-2025-21386: Microsoft Excel Remote Code Execution Vulnerability Microsoft has disclosed a critical security vulnerability (CVE-2025-21386) affecting Excel that could allow remote code execution...
CVE-2025-21381: Critical Microsoft Excel Vulnerability Explained
CVE-2025-21381: Understanding the Microsoft Excel Vulnerability A newly discovered vulnerability in Microsoft Excel, tracked as CVE-2025-21381, has raised significant concerns among cybersecurity...
CVE-2025-21371: Critical Windows Telephony Service Vulnerability Exposes Systems to Remote Code Execution
CVE-2025-21371: Windows Telephony Service Vulnerability Exposed A newly discovered vulnerability in Windows Telephony Service (CVE-2025-21371) has been classified as critical, allowing attackers to...
CVE-2025-21367: Patch Now – Win32 Flaw Grants SYSTEM Access
Microsoft has recently disclosed CVE-2025-21367, a critical elevation of privilege (EoP) vulnerability affecting multiple Windows versions, including Windows 10, 11, and Windows Server editions. This...
CVE-2025-21359: Critical Windows Kernel Security Vulnerability Explained and Mitigation Steps
Microsoft has issued a critical security alert regarding CVE-2025-21359, a newly discovered vulnerability in the Windows kernel that could allow attackers to execute arbitrary code with system-level...
Windows Core Messaging flaw grants SYSTEM access in February 2025 Patch Tuesday
CVE-2025-21358: Critical Elevation of Privileges Vulnerability in Windows Core Messaging Microsoft has disclosed a critical security vulnerability (CVE-2025-21358) affecting the Windows Core...
CVE-2025-21350: Critical Kerberos Vulnerability Threatens Windows Authentication Systems
CVE-2025-21350: New Denial of Service Vulnerability in Kerberos Explained A newly discovered vulnerability in the Kerberos authentication protocol, tracked as CVE-2025-21350, poses a significant...