37661 matches found
CVE-2025-58724
CVE-2025-58724 : Affects Azure Connected Machine Agent. Description confirms an improper access control flaw that enables an authorized local attacker to escalate privileges. CVSS v3.1/3.1 base score 7.8 (HIGH) with local, low complexity, and no user interaction requirements; impact on confidenti...
CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-58714
CVE-2025-58714 is an elevation-of-privilege issue in the Windows Ancillary Function Driver for WinSock caused by improper access control. The description indicates an authorized attacker could locally elevate privileges. Connected Microsoft advisories (KB/OS update pages) show this CVE among Wind...
CVE-2025-58714 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-55697
CVE-2025-55697: Heap-based buffer overflow in Azure Local allows an authenticated, local attacker to escalate privileges. The vulnerability is mapped to Windows OS updates (KB5066835) and related advisories; Microsoft states a local elevation of privileges with high impact. Public exploits are no...
CVE-2025-55697 Azure Local Elevation of Privilege Vulnerability
...
CVE-2025-55697 Azure Local Elevation of Privilege Vulnerability
...
CVE-2025-55696 NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
...
CVE-2025-55696
CVE-2025-55696 describes a time-of-check time-of-use (TOCTOU) race condition in the NtQueryInformation Token function (ntifs.h) that can allow a local, authorized attacker to elevate privileges. The connected Microsoft advisories indicate Windows updates addressing security vulnerabilities in Oct...
CVE-2025-55696 NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability
...
CVE-2025-55694
CVE-2025-55694 affects the Windows Error Reporting service. The root cause is improper access control, enabling an authenticated local attacker to elevate privileges on affected Windows systems. Public documentation confirms the issue and links to Microsoft update guidance (KB5066780 and related ...
CVE-2025-55694 Windows Error Reporting Service Elevation of Privilege Vulnerability
...
CVE-2025-55694 Windows Error Reporting Service Elevation of Privilege Vulnerability
...
CVE-2025-55693 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-55692
Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.
CVE-2025-55692 Windows Error Reporting Service Elevation of Privilege Vulnerability
...
CVE-2025-55693
CVE-2025-55693 is a Windows Kernel elevation-of-privilege vulnerability caused by a use-after-free in the Windows Kernel. It allows a local attacker to escalate privileges. Public exploits exist per connected advisories, and Microsoft has released updates (MSRC) to fix the issue; apply the corres...