CVE-2025-43491 Poly Lens Desktop Application – Privilege Escalation

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted...

CVE-2025-43491

CVE-2025-43491 concerns HP Poly Lens Desktop on Windows, where a flaw may allow modifying the filesystem and could grant SYSTEM-level privileges. The available connected documents consistently describe a filesystem-modification path to privilege escalation but do not provide concrete exploit deta...

CVE-2025-54256

Dreamweaver Desktop versions 21.5 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must click on a malicious link, and...

CVE-2025-54256 Dreamweaver Desktop | Cross-Site Request Forgery (CSRF) (CWE-352)

Dreamweaver Desktop versions 21.5 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must click on a malicious link, and...

CVE-2025-54256

Dreamweaver Desktop (Windows/macOS) is affected by CVE-2025-54256: CSRF that could allow arbitrary code execution in the context of the current user. Affected: Dreamweaver Desktop versions 21.5 and earlier. Root cause described in the CVE as a Cross-Site Request Forgery vulnerability that require...

CVE-2025-53801

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-53801

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-53801

CVE-2025-53801 is a Windows DWM core library elevation-of-privilege vulnerability described as an untrusted pointer dereference that enables a locally authenticated attacker to achieve elevation of privileges . The CVE is associated with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vect...

CVE-2025-53801 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-53801 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

Adobe Dreamweaver Desktop 跨站请求伪造漏洞

Adobe Dreamweaver Desktop is a web design and development software from the American company Audobee Adobe. Adobe Dreamweaver Desktop suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current user's environme...

PT-2025-36914

Name of the Vulnerable Software and Affected Versions: Dreamweaver Desktop versions 21.5 and earlier Description: Dreamweaver Desktop versions 21.5 and earlier are susceptible to a Cross-Site Request Forgery CSRF issue. Successful exploitation could lead to arbitrary code execution within the...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from the US-based Zoom Corporation. A security vulnerability exists in Zoom Workplace that originates from cross-site scripting and could lead to a denial of service attack...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25033)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25033 advisory. - Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of servi...

Rockwell Automation ThinManager 安全漏洞

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. A server-side request forgery vulnerability exists in Rockwell Automation ThinManager, which stems from...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace Clients for Windows that originates from an improperly executed operation that could lead to information disclosure...

PT-2025-36958

Name of the Vulnerable Software and Affected Versions: Poly Lens Desktop affected versions not specified Description: A flaw in the Poly Lens Desktop application on Windows may permit filesystem modifications, potentially granting SYSTEM level privileges. Recommendations: At the moment, there is ...

Poly Lens Desktop Application – Privilege Escalation

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with...

Stable Channel Update for Desktop

The Stable channel has been updated to 140.0.7339.127/.128 for Windows, 140.0.7339.132/.133 for Mac and 140.0.7339.127 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and...