CVE-2025-26639

Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-20947

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access image files across multiple users. User interaction is required for triggering this vulnerability...

CVE-2025-20940

Improper handling of insufficient permission in Samsung Device Health Manager Service prior to SMR Apr-2025 Release 1 allows local attackers to access provider in SDMHS...

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CBL Mariner 2.0 Security Update: augeas (CVE-2025-2588)

The version of augeas installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2588 advisory. - A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability...

CVE-2025-29822

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-29804

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-29792

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2025-27733

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27727

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-27492

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...

CVE-2025-27483

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27467

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-26648

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-21204

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2025-26675

Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2025-29804

CVE-2025-29804 is an elevation-of-privilege vulnerability in Microsoft Visual Studio caused by improper access control. A local attacker with LOW privileges and requiring user interaction could elevate privileges on affected Visual Studio components. Public notes reference affected Visual Studio ...

CVE-2025-27736

Technical details about CVE-2025-27736 (affected product/versions/root cause/fix) are not disclosed in the provided connected documents. Monitor Microsoft advisories and CVE records for updates and remediation information.

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

CVE-2025-26649

CVE-2025-26649 describes a race condition in Windows Secure Channel (concurrent execution using a shared resource with improper synchronization) that could allow a locally authenticated user to elevate privileges. Primary sources (MSRC/NVD) confirm the vulnerability exists in the Windows Secure C...