binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption

A vulnerability was found in GNU Binutils 2.40 to version 2.44 and affects the elfgcsweep function of the bfd/elflink.c file of the component ld. The manipulation leads to memory corruption and a program crash. An attacker must have local access to exploit this vulnerability...

Windows Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally...

Windows WLAN Service Elevation of Privilege Vulnerability

External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally...

Windows Speech Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Information Disclosure Vulnerability

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...

Windows License Manager Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability

Use after free in Multimedia Class Scheduler Service MMCSS allows an authorized attacker to elevate privileges locally...

Siemens Altair Grid Engine 安全漏洞

Siemens Altair Grid Engine is a distributed resource management system from Siemens USA. A security vulnerability exists in Siemens Altair Grid Engine versions prior to V2026.0.0 that stems from an error mishandling that discloses sensitive password hash information when processing user...

Agnitum Outpost Security Suite 安全漏洞

Agnitum Outpost Security Suite is an Internet security suite from the Russian company Agnitum. A security vulnerability exists in Agnitum Outpost Security Suite versions 7.5.3 and 7.6, which stems from a flaw in the lock function that could allow a local attacker to execute arbitrary code...

PT-2025-46347

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU4 Description A security issue exists in the agent component of Ivanti Endpoint Manager that allows a locally authenticated attacker to write arbitrary files to any location on the disk due to...

PT-2025-46474

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue exists in the Windows Routing and Remote Access Service RRAS where an untrusted pointer dereference can occur. This allows an authorized attack...

PT-2025-46481

Name of the Vulnerable Software and Affected Versions Windows TDX.sys affected versions not specified Description A buffer over-read issue exists in Windows TDX.sys. A local attacker with authorization can exploit this to gain elevated privileges. Recommendations At the moment, there is no...

PT-2025-46515

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An issue exists in Visual Studio Code CoPilot Chat Extension related to improper limitation of a pathname to a restricted directory, also known as a 'path...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a privilege issue...

PT-2025-46437

Name of the Vulnerable Software and Affected Versions UEFI firmware with Slim Bootloader affected versions not specified Description A flaw exists in the UEFI firmware for the Slim Bootloader that could allow for privilege escalation. A local attacker with privileged user access and high complexi...

Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2025-1264)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1264 advisory. NULL Pointer Dereference vulnerability in the session ID calculation logic of the libssh library. The flaw arises from improper handling of allocation errors during cryptographic operations in...

PT-2025-46460

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw exists in Windows Routing and Remote Access Service RRAS related to improper link resolution before file access, specifically a 'link following'...