CVE-2025-59207 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-59207

CVE-2025-59207 is an elevation-of-privilege vulnerability in the Windows Kernel caused by an untrusted pointer dereference, enabling a locally authenticated attacker to elevate privileges. The Initial Description confirms the vulnerability type and impact. The Connected Documents provide Windows-...

CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59202

CVE-2025-59202 is a local privilege escalation via a use-after-free in Windows Remote Desktop Services. The Connected documents confirm affected component as Windows Remote Desktop Services and list the CVE with a high-severity context, but do not provide exploit details. No root-cause specifics ...

CVE-2025-59201

CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...

CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-59201 Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

...

CVE-2025-59196 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-59199 Software Protection Platform (SPP) Elevation of Privilege Vulnerability

...

CVE-2025-59199 Software Protection Platform (SPP) Elevation of Privilege Vulnerability

...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...

CVE-2025-59196 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-59199

CVE-2025-59199 affects the Software Protection Platform (SPP). It is described as an improper access control vulnerability that allows a locally authenticated attacker to escalate privileges (CVSSv3.1 base score 7.8, HIGH; attack vector: LOCAL; privileges required: LOW; user interaction: NONE). T...

CVE-2025-58728 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

CVE-2025-58728

CVE-2025-58728 is a Windows Bluetooth Service use-after-free elevation-of-privilege vulnerability. Connected documents corroborate a local, privilege-escalation impact (CVSS-like note: 7.8 HIGH, local access, no user interaction). The NCSC data lists CVE-2025-58728 under Windows Bluetooth Service...

CVE-2025-58728 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

CVE-2025-58722

CVE-2025-58722 is a heap-based buffer overflow in Windows DWM that could enable a locally authenticated attacker to elevate privileges. The available connected documents confirm the affected component (Windows DWM) and the local privilege elevation impact, but do not provide concrete exploit deta...