37662 matches found
CVE-2025-59193 Windows Management Services Elevation of Privilege Vulnerability
...
CVE-2025-59192
CVE-2025-59192 is a local privilege-escalation issue described as a buffer over-read in Storport.sys. The vulnerability affects the Storport.sys driver and is assigned a CVSS v3.1 score of 7.8 (Local, Privileges Required: Low, User Interaction: None) with Impact on confidentiality, integrity, and...
CVE-2025-59192 Storport.sys Driver Elevation of Privilege Vulnerability
...
CVE-2025-59192 Storport.sys Driver Elevation of Privilege Vulnerability
...
CVE-2025-59193 Windows Management Services Elevation of Privilege Vulnerability
...
CVE-2025-59193
CVE-2025-59193 describes a race condition in Windows Management Services (a Windows component) where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The description in the CVE notes local, privilege-escalation impact due to improper synchronizatio...
CVE-2025-59191 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-59191 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-59191
CVE-2025-59191 is a Windows security vulnerability in the Connected Devices Platform Service (Cdpsvc). It is described as a heap-based buffer overflow that, when exploited by an authenticated local attacker, enables elevation of privileges. The CVE is documented with a high impact (local, privile...
CVE-2025-59189
CVE-2025-59189 is a local privilege-escalation in Microsoft Brokering File System (Windows). Description: use-after-free in the Brokering File System allows a non-remote, local attacker to escalate privileges. The patched fix is included in the October 2025 Windows security update KB5066835 (OS B...
CVE-2025-59189 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-59189 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-59187 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-59187
CVE-2025-59187 corresponds to a Windows Kernel local privilege escalation described in EUVD-2025-34304 as due to improper input validation. The vulnerability affects the Windows Kernel with the potential for an authorized attacker to elevate privileges locally. The connected KB updates discuss Wi...
CVE-2025-58727
CVE-2025-58727 describes a race-condition in the Windows Connected Devices Platform Service (Cdpsvc) that allows an authenticated, local attacker to elevate privileges. The issue originates from concurrent execution using a shared resource without proper synchronization. Documents identify the af...
CVE-2025-58727 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58725
CVE-2025-58725 is described in connected documents as a heap-based buffer overflow in Windows COM that allows a locally authenticated attacker to elevate privileges. The CVE is associated with Windows COM components, with a CVSS v3.1 score of 7.0 (Local, High impact, Privilege escalation) and Exp...
CVE-2025-58726 Windows SMB Server Elevation of Privilege Vulnerability
...