37663 matches found
CVE-2025-59277
CVE-2025-59277 involves improper validation of a specified input type in Windows Authentication Methods, enabling a locally authenticated attacker to elevate privileges. Connected MSKBs and EUVD-2025-34369 corroborate the Windows Authentication Methods focus and local privilege escalation risk. T...
CVE-2025-59254
Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...
CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59255
CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...
CVE-2025-59254 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59254 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59249
CVE-2025-59249 is a Microsoft Exchange Server elevation-of-privilege vulnerability described as caused by weak authentication. The CVE is discussed across multiple sources (CNVD, EUVD, NCSC, MSRC and CVE listings) with details indicating that an attacker who is already authenticated can escalate ...
CVE-2025-59249 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-59249 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-49708
CVE-2025-49708: A use-after-free vulnerability in the Microsoft Graphics Component can allow an authorized attacker to elevate privileges over the network. Connected Microsoft security updates and advisories indicate this issue is addressed in October 2025 Windows updates (KBs referenced in KB506...
CVE-2025-59242
CVE-2025-59242 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation for an authenticated user. Connected Microsoft KB advisories confirm the vendor-fixed remediation via October 2025 security updates (e.g., KB5066793 and rela...
CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-59207 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-59207 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-59207
CVE-2025-59207 is an elevation-of-privilege vulnerability in the Windows Kernel caused by an untrusted pointer dereference, enabling a locally authenticated attacker to elevate privileges. The Initial Description confirms the vulnerability type and impact. The Connected Documents provide Windows-...