37663 matches found
CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability
...
CVE-2025-53717 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
...
CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability
...
CVE-2025-53717
CVE-2025-53717 affects Windows Virtualization-Based Security (VBS) Enclave. Local privilege escalation can occur due to reliance on untrusted inputs in a security decision within the Enclave. Evidence: the CVE entry identifies the Enclave as the vulnerable component with a base CVSS v3.1 score of...
CVE-2025-59494 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2025-59494
CVE-2025-59494 corresponds to an elevation-of-privilege vulnerability in Microsoft Azure Monitor Agent (Azure Monitor Agent). The issue is described as improper access control that allows an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.8 (High), with LOCAL attack, low a...
CVE-2025-59494 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability
...
CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability
...
CVE-2025-59291 Confidential Azure Container Instances Elevation of Privilege Vulnerability
...
CVE-2025-59292
CVE-2025-59292 affects Confidential Azure Container Instances. External control of a file name or path in this component can let an authorized attacker elevate privileges locally. The CVE is corroborated by multiple sources in the Connected Documents (Microsoft MSRC entry, EU/NCSC/MSS intel, and ...
CVE-2025-59291 Confidential Azure Container Instances Elevation of Privilege Vulnerability
...
CVE-2025-59291
Summary: CVE-2025-59291 affects Confidential Azure Container Instances. The issue is described as external control of a file name or path, enabling an authorized attacker to elevate privileges locally. Affected product: Confidential Azure Container Instances (Azure). Root cause / vulnerability cl...
CVE-2025-59290 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59290
CVE-2025-59290 is a local privilege escalation caused by a use-after-free in Windows Bluetooth Service. Affected component: Windows Bluetooth Service. Root cause: use-after-free. Impact: an authorized attacker can elevate privileges locally. Exploitation status is not specified in the provided do...
CVE-2025-59290 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59281
Xbox Gaming Services suffers an elevation of privilege via improper link resolution before file access ("link following"). An authorized local attacker can escalate to higher privileges. CVSSv3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, no user interaction. Remediation...
CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability
...