<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 05:04:56 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-25166 — Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-25166</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft Windows ADK for Windows 10, version 2004, Microsoft Windows ADK for Windows 11, version 22H2, Microsoft Windows ADK for Windows 11, version 23H2, Microsoft Windows ADK for Windows 11, version 24H2, Microsoft Windows ADK for Windows Server 2022&lt;/p&gt;
&lt;p&gt;Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft Windows ADK for Windows 10, version 2004, Microsoft Windows ADK for Windows 11, version 22H2, Microsoft Windows ADK for Windows 11, version 23H2, Microsoft Windows ADK for Windows 11, version 24H2, Microsoft Windows ADK for Windows Server 2022&lt;/p&gt;
&lt;p&gt;Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-25166</guid>
    </item>
  </channel>
</rss>
