363 matches found
KLA87444 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...
PT-2025-36844
Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: A use-after-free issue exists within the Windows Connected Devices Platform Service. This flaw could allow an authorized attacker to gain elevated...
PT-2025-36856
Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The Windows Connected Devices Platform Service contains a race condition due to improper synchronization during concurrent execution using a shared...
CVE-2025-9696
The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...
CVE-2025-9696
The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...
CVE-2025-9696
CVE-2025-9696 concerns SunPower PVS6 BluetoothLE security. The vulnerability arises from the device’s Bluetooth Low Energy interface using hardcoded encryption parameters and publicly accessible protocol details, enabling an attacker in Bluetooth range to gain full access to the servicing interfa...
PT-2025-35584
Name of the Vulnerable Software and Affected Versions: SunPower PVS6 affected versions not specified Description: The SunPower PVS6’s BluetoothLE interface is vulnerable due to the use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range...
CVE-2025-53721
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-53721
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-53721
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-53721
Technical details are not publicly available in the provided connected documents. The CVE is described as a use-after-free in Windows Connected Devices Platform Service enabling local privilege elevation, but specifics (root cause, affected versions, exploit method, and fix) are not disclosed her...
CVE-2025-53721 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-53721 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
PT-2025-32826 · Microsoft · Windows Connected Devices Platform Service +1
Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: A use after free issue exists in the Windows Connected Devices Platform Service that could allow an authorized attacker to elevate privileges locally...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Connected Devices Platform Service. An attacker could exploit the vulnerability to elevate privileges. The following...
The vulnerability of the Connected Devices Platform Service (CDPSvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Connected Devices Platform Service CDPSvc in Microsoft Windows operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2025-49724
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...