CVE-2025-24059

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-24046

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2025-24044

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2025-26631

CVE-2025-26631 affects Visual Studio Code and is described as an Uncontrolled search path element that can allow an authorized, local attacker to escalate privileges. Connected sources (e.g., Nessus plugin for Microsoft Visual Studio Code security update) note that the issue affects installations...

CVE-2025-24991

CVE-2025-24991 is an NTFS out-of-bounds read vulnerability in Windows that can disclose local information after mounting a malicious VHD. Exploitation requires local access and user interaction (per CVSS) or mounting a crafted disk image (per patch-cycle reporting). Microsoft has issued updates; ...

CVE-2025-24076

CVE-2025-24076 affects the Windows Cross Device Service, enabling local privilege escalation via improper access control. Public material confirms a local, low-privilege attacker can escalate to SYSTEM by exploiting DLL handling in the Cross Device Service (e.g., by replacing CrossDevice.Streamin...

CVE-2025-24067

CVE-2025-24067 is described in the connected documents as a heap-based buffer overflow in the Microsoft Streaming Service Driver that allows an authenticated, local attacker to elevate privileges. The vulnerability concerns the Windows kernel streaming service component and is listed with a high ...

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

CVE-2025-25008

CVE-2025-25008 describes an elevation-of-privilege in Windows due to improper link resolution before file access (link following). An authorized, local attacker could exploit this to gain higher privileges. CVSSv3.1 base score is 7.1 (High); attack vector LOCAL; privileges required LOW; user inte...

CVE-2025-24995

CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...

CVE-2025-24044

CVE-2025-24044 is a local privilege-escalation in the Windows Win32 Kernel Subsystem caused by a use-after-free condition. Connected docs classify it as an EoP risk with local exploitability and note fixes in Microsoft Windows updates (e.g., March 2025 cycle). No product/version specifics beyond ...

CVE-2024-9157

Technical details about CVE-2024-9157 are not present in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from the referenced sources.

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

Visual Studio Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

Visual Studio Code Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-24991

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...