15730 matches found
PT-2025-39432
Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 M16U1 V240425 Description A flaw exists that allows for remote command injection. The issue is located in the sub 401778 function within the /cgi-bin/firewall.cgi file. Manipulation of the dmz flag argument can trigger the flaw...
Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts
Adobe has warned of a critical security flaw in its Commerce and Magento Open Source platforms that, if successfully exploited, could allow attackers to take control of customer accounts. The vulnerability, tracked as CVE-2025-54236 aka SessionReaper, carries a CVSS score of 9.1 out of a maximum ...
Defender Firewall Service Privilege Escalation
The vulnerability of the Defender Firewall Service for Windows operating systems is related to data type conversion errors. Exploiting this vulnerability can allow attackers to increase their privileges...
Defender Firewall Service Privilege Escalation
The vulnerability of the Defender Firewall Service for Windows operating systems is related to data type conversion errors. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2025-54915
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54915
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54109
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54109
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54104
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54104
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54094
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54094
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-53810
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-53810
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-53808
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-53808
Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2025-54915
CVE-2025-54915 describes a type-confusion vulnerability in the Windows Defender Firewall Service that could allow a locally authenticated attacker with high privileges to elevate to a higher level of access. The linked sources confirm the CVE exists and cite Defender Firewall Service as the affec...
CVE-2025-54915 Windows Defender Firewall Service Elevation of Privilege Vulnerability
...
