CVE-2025-59516 Windows Storage VSP Driver Elevation of Privilege Vulnerability

...

CVE-2025-59516 Windows Storage VSP Driver Elevation of Privilege Vulnerability

...

CVE-2025-64673 Windows Storage VSP Driver Elevation of Privilege Vulnerability

...

CVE-2025-64673 Windows Storage VSP Driver Elevation of Privilege Vulnerability

...

CVE-2025-64673

CVE-2025-64673 is a Windows Storage VSP Driver elevation-of-privilege vulnerability in the Storvsp.sys component. The connected sources confirm improper access control in Storvsp.sys that could allow an authorized, local attacker with low privileges to obtain higher privileges. The CVSS v3.1 base...

CVE-2025-64666

CVE-2025-64666 affects Microsoft Exchange Server and is caused by improper input validation that permits an authenticated, network-accessing attacker to elevate privileges. The vulnerability is categorized with a high impact (C/H, I/H, A/H) and requires low privileges with no user interaction. Pu...

EUVD-2025-202236

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-64666 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2025-64666 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-62573 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-64658

CVE-2025-64658 is a Windows Shell elevation-of-privilege vulnerability described as a race condition caused by concurrent execution using a shared resource. The available connected documents confirm impact as local privilege escalation for an attacker with local access and low privileges, requiri...

CVE-2025-62573

CVE-2025-62573 is a DirectX Graphics Kernel elevation-of-privilege vulnerability described as a use-after-free in Windows DirectX that enables an authorized, local attacker to obtain elevated privileges. The EUVD and related advisories confirm the issue and map it to a Windows DirectX privilege e...

CVE-2025-62572

CVE-2025-62572 is a Windows vulnerability in Application Information Services causing an out-of-bounds read that enables local privilege elevation for an authenticated attacker. Affected products are Windows components (notably Windows client/server SKUs referenced in the Microsoft advisories). M...

CVE-2025-62572 Application Information Service Elevation of Privilege Vulnerability

...

CVE-2025-62572 Application Information Service Elevation of Privilege Vulnerability

...

CVE-2025-62571 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-62571 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-62571

CVE-2025-62571 is a Windows Installer Elevation of Privilege vulnerability caused by improper input validation. The CVE affects Windows Installer, enabling an authorized, local attacker to escalate privileges (CVSS v3.1: 7.8, Local, Privileges Required: Low, User Interaction: None). Connected sou...