CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-49694

CVE-2025-49694 – Microsoft Brokering File System Elevation of Privilege. Description confirms a null pointer dereference that enables an authorized, local attacker to gain elevated privileges. CVSS v3.1 base score 7.8 ( HIGH ); attack vector LOCAL, privileges required LOW, user interaction NONE, ...

CVE-2025-49677

CVE-2025-49677 describes a use-after-free in Microsoft Brokering File System that enables local privilege escalation for an authorized user. The vulnerability is demonstrated by a PoC that yields an interactive SYSTEM shell via a scheduled task abuse, indicating a local attack vector with high im...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System 资源管理错误漏洞

Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected: Windows...

PT-2025-28745 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is related to an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this problem by injecting crafted XML or XPath...

PT-2025-28590 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to a double free in the Microsoft Brokering File System, which allows an authorized attacker to elevate privileges locally. Recommendations: At...

PT-2025-28752 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: ColdFusion is susceptible to a Server-Side Request Forgery SSRF issue that may allow arbitrary file system read. A high-privilege authenticated attacker can exploit this...

Microsoft Brokering File System 代码问题漏洞

Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...

PT-2025-33776

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF vulnerability in the f2fs sync inode meta function. This issue was identified by syzkaller and results from improper handling of memory,...

Microsoft Brokering File System 资源管理错误漏洞

Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...

PT-2025-28575 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Brokering File System, which allows an authorized attacker to elevate privileges locally. This ca...

PT-2025-28591 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to a null pointer dereference in Microsoft Brokering File System, which allows an authorized attacker to elevate privileges locally...

SUSE CVE-2025-38222

In the Linux kernel, the following vulnerability has been resolved: ext4: inline: fix len overflow in ext4prepareinlinedata When running the following code on an ext4 filesystem with inlinedata feature enabled, it will lead to the bug below. fd = open"file1", ORDWR | OCREAT | OTRUNC, 0666;...

SUSE CVE-2025-38230

In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount to prevent crashes Validate dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. Limits are derived from L2LPERCTL,...

webkitgtk: A maliciously crafted webpage may be able to fingerprint the user

A flaw was found in WebKitGTK. A maliciously crafted web page may be able to fingerprint the user due to improper access restrictions to the file system...

The vulnerability of the vfs inode.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vfs inode.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to gain full control over the application.

The vulnerability of the Oracle Solaris operating system’s file system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...