18865 matches found
CVE-2025-32707
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...
CVE-2025-32701
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-30385
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-29970
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-29970
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-30385 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-30385
Technical details about CVE-2025-30385 are not provided in the connected documents. The initial description mentions a Windows use-after-free in the CLFS driver that could elevate privileges, but no vendor/version specifics or fixes are disclosed here. Monitor for authoritative updates.
CVE-2025-30385 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-32706
CVE-2025-32706 is an elevation-of-privilege flaw in Windows CLFS Driver (heap-based buffer overflow) that enables local privilege escalation. Affected product: Windows Common Log File System Driver. Base CVSS v3.1: 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction. Pub...
CVE-2025-32701
CVE-2025-32701 is a Windows CLFS driver use-after-free vulnerability that can allow an authorized attacker to elevate privileges locally. The weakness affects the Windows Common Log File System Driver and has a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, an...
CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-29970 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-29970
CVE-2025-29970 is a local privilege-escalation vulnerability in the Microsoft Brokering File System caused by a use-after-free condition. An authorized attacker could exploit this to elevate privileges on the host. Public documentation identifies the affected component and the root cause as a use...
CVE-2025-29970 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-31493
Kirby CVE-2025-31493 affects versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 where dynamic collection names passed to collection() or $kirby->collection() can bypass validation, enabling path traversal. The missing check allowed traversal outside the configured collections root (and even Kirby ...
CISA Adds Five Known Exploited Vulnerabilities to Catalog
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-30400link is external Microsoft Windows DWM Core Library Use-After-Free Vulnerability CVE-2025-32701link is external Microsoft Windows Common Log File System...
grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks
A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grubmalloc may be called with a smaller...
grub2: fs/ufs: OOB write in the heap
A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure...