PT-2025-46437

Name of the Vulnerable Software and Affected Versions UEFI firmware with Slim Bootloader affected versions not specified Description A flaw exists in the UEFI firmware for the Slim Bootloader that could allow for privilege escalation. A local attacker with privileged user access and high complexi...

PT-2025-46515

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An issue exists in Visual Studio Code CoPilot Chat Extension related to improper limitation of a pathname to a restricted directory, also known as a 'path...

PT-2025-46481

Name of the Vulnerable Software and Affected Versions Windows TDX.sys affected versions not specified Description A buffer over-read issue exists in Windows TDX.sys. A local attacker with authorization can exploit this to gain elevated privileges. Recommendations At the moment, there is no...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a privilege issue...

Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2025-1264)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1264 advisory. NULL Pointer Dereference vulnerability in the session ID calculation logic of the libssh library. The flaw arises from improper handling of allocation errors during cryptographic operations in...

PT-2025-46474

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue exists in the Windows Routing and Remote Access Service RRAS where an untrusted pointer dereference can occur. This allows an authorized attack...

CVE-2024-57695

The CVE-2024-57695 entry concerns Agnitum Outpost Security Suite versions 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842), where a local attacker can execute arbitrary code via the lock function. The vendor addressed this by releasing version 8.0 (4164.652.1856) on December 17, 2012. Connected docu...

PT-2025-46502

Name of the Vulnerable Software and Affected Versions Windows License Manager affected versions not specified Description A flaw exists in Windows License Manager that allows an authorized attacker to disclose sensitive information locally through the insertion of this information into log files...

PT-2025-46465

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to gain elevated privileges on a local system...

PT-2025-46460

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw exists in Windows Routing and Remote Access Service RRAS related to improper link resolution before file access, specifically a 'link following'...

PT-2025-46463

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read issue exists in the Windows Bluetooth RFCOM Protocol Driver. A local authorized attacker can potentially disclose information. Recommendations At the moment, there is no...

PT-2025-46468

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue with access control in the Windows Client-Side Caching CSC Service can allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no...

PT-2025-46471

Name of the Vulnerable Software and Affected Versions Storvsp.sys affected versions not specified Description An issue exists in the Storvsp.sys driver where an untrusted pointer dereference can occur. This allows a local attacker with authorization to cause a denial of service. Recommendations A...

PT-2025-46469

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description An out-of-bounds read issue exists in Windows Hyper-V. A local attacker with authorization can potentially disclose information. Recommendations At the moment, there is no information...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

USN-7867-1 rust-sudo-rs vulnerabilities

It was discovered that sudo-rs incorrectly handled passwords when timeouts occurred and the pwfeedback default was not set. This could result in a partially typed password being output to standard input, contrary to expectations. It was discovered that sudo-rs incorrectly handled the targetpw and...

CVE-2025-46430

Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...