37661 matches found
CVE-2025-59275 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-59275
CVE-2025-59275 involves Windows Authentication Methods with improper validation of a specified input type, enabling an authorized local attacker to escalate privileges. The connected EUVD-2025-34271 entry corroborates the same description. No technical details about affected product versions, roo...
CVE-2025-59230
CVE-2025-59230 describes an improper access control flaw in the Windows Remote Access Connection Manager (RasMan). The vulnerability allows an authenticated local user to elevate privileges to SYSTEM by manipulating RasMan’s IPC handling/ACLs, as reported in multiple sources. Exploitation activit...
CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
CVE-2025-59241
CVE-2025-59241: A local elevation-of-privilege in Windows Health and Optimized Experiences Service due to improper link resolution before file access. The Microsoft and national cert advisories list the vulnerability as a Windows flaw tied to health/experience services; a public-exploit note exis...
CVE-2025-59241 Windows Health and Optimized Experiences Elevation of Privilege Vulnerability
...
CVE-2025-59241 Windows Health and Optimized Experiences Elevation of Privilege Vulnerability
...
CVE-2025-59213
The CVE-2025-59213 issue affects Microsoft Endpoint Configuration Manager / Configuration Manager (System Center Configuration Manager). The vulnerability is described as improper neutralization of special elements used in an SQL command (SQL injection) that can allow an attacker to elevate privi...
CVE-2025-59213 Configuration Manager Elevation of Privilege Vulnerability
...
CVE-2025-59213 Configuration Manager Elevation of Privilege Vulnerability
...
CVE-2025-59210
CVE-2025-59210 affects Windows Resilient File System (ReFS) Deduplication Service and enables local elevation of privileges. Base metrics show CVSS v3.1: Local, High impact (C/H), no user interaction required, with total impact on confidentiality, integrity, and availability. Microsoft’s October ...
CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
...
CVE-2025-59205
CVE-2025-59205 is described as a race-condition vulnerability in the Microsoft Graphics Component caused by concurrent access to a shared resource, enabling an authorized local attacker to elevate privileges. The connected EUVD-2025-34293 entry reiterates the root cause and local privilege escala...
CVE-2025-59205 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59205 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59194 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-59194 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-59194
CVE-2025-59194 is a Windows Kernel local privilege-escalation vulnerability (uninitialized resource) with a CVSS v3.1 base score of 7.0 (Local, High). Public exploits/POC exist (e.g., GitHub). Public advisories and MSRC/MSKB entries indicate Microsoft has released updates to address this vulnerab...