37661 matches found
CVE-2025-58714
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2025-58715
Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2025-55684
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55680
Time-of-check time-of-use toctou race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-55339
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...
CVE-2025-55331
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
CVE-2025-55247
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2025-50175
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...
CVE-2025-59289
CVE-2025-59289 concerns a double-free condition in Windows Bluetooth Service enabling a locally authenticated attacker to elevate privileges. Public sources within the provided documents confirm this CVE is associated with the Windows Bluetooth Service and is categorized with a high impact (local...
CVE-2025-59289 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59289 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59285 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2025-59278 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-59278 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-59285 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2025-59278
CVE-2025-59278 affects Windows Authentication Methods and is tied to an improper validation of input type, enabling local privilege escalation for an authorized user. The CVE is rated with CVSS v3.1 base metrics around 7.8 (HIGH) by Microsoft/CNA sources, indicating a local, high-severity impact ...
CVE-2025-59261 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59261
CVE-2025-59261 concerns the Microsoft Windows Graphics Component. The vulnerability is a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized local attacker to achieve elevated privileges on the system. The impact is privilege escalation on affected Windows builds wher...