37656 matches found
CVE-2025-64679
CVE-2025-64679 is a heap-based buffer overflow in Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. The NCSC advisory and CVE listings confirm this affects Windows DWM Core Library and is tracked under CVE-2025-64679 with a high-severity impact (local,...
CVE-2025-64679 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-64680 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-64680
CVE-2025-64680 affects Windows DWM Core Library. A heap-based buffer overflow allows an authorized, locally authenticated attacker to escalate privileges. The connected advisories/feeds confirm this CVE is part of Microsoft Windows vulnerability fixes and that Windows updates (KBs and security gu...
CVE-2025-62565 Windows File Explorer Elevation of Privilege Vulnerability
...
CVE-2025-64661 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2025-62565
CVE-2025-62565 is a Windows Shell elevation-of-privilege vulnerability caused by a use-after-free in Windows Shell. A locally authenticated attacker can exploit it to elevate privileges; CVSSv3.1 base score 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and U...
CVE-2025-64661 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2025-64661
CVE-2025-64661 – Windows Shell Elevation of Privilege is supported by connected sources. The vulnerability involves a race condition in concurrent execution using a shared resource in Windows Shell, allowing an authorized local attacker to elevate privileges. Connected documents confirm impact as...
CVE-2025-62565 Windows File Explorer Elevation of Privilege Vulnerability
...
CVE-2025-62569
CVE-2025-62569 is a Use‑After‑Free vulnerability in the Microsoft Brokering File System that elevates privileges locally for an authenticated attacker. The CVE is categorized with CVSS v3.1 as Local, Low Privileges Required, High Impact (Confidentiality, Integrity, Availability), base score 7.0. ...
EUVD-2025-202210
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62569 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-62569 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-62474 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
CVE-2025-62474
CVE-2025-62474 is a Windows Remote Access Connection Manager Elevation of Privilege vulnerability. It involves improper access control in the Remote Access Connection Manager, enabling a locally authenticated attacker (low privileges, no user interaction) to obtain elevated rights. CVSS v3.1 base...
EUVD-2025-202222
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-62467
CVE-2025-62467 is a Windows Projected File System Elevation of Privilege vulnerability where an integer overflow/wraparound in ProjFS can allow an authenticated, local attacker to escalate privileges. Public sources confirm the issue is tied to Windows Projected File System and summarize the impa...