Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...

Windows Health and Optimized Experiences Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

Windows Hello Security Feature Bypass Vulnerability

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally...

Data Sharing Service Spoofing Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

PT-2025-42133

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue allows a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...

PT-2025-42091

Name of the Vulnerable Software and Affected Versions Software Protection Platform affected versions not specified Description Improper access control in the Software Protection Platform SPP, specifically within the Sppsvc.exe service, allows an authorized attacker to elevate privileges locally...

PT-2025-41974

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description An improper access control issue exists in Microsoft PowerShell. This allows an authorized attacker with local access to elevate privileges. The flaw enables privilege escalation...

PT-2025-41922

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description APTIOV BIOS contains a flaw that allows a local attacker to trigger an Out-of-bounds Write. Successful exploitation of this issue may result in data corruption and a loss of system availabilit...

PT-2025-42029

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An improper input validation issue exists in the Windows Kernel. This allows a local, unauthorized attacker to disclose information. Recommendations At the moment, there is no...

PT-2025-42092

Name of the Vulnerable Software and Affected Versions Data Sharing Service Client affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows a local attacker to perform spoofing. Approximately...

PT-2025-42046

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in the NtQueryInformationToken function within ntifs.h. This condition allows a locally authorized attacker to elevate privileges. The...

PT-2025-42019

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A security feature bypass is possible locally due to the cleartext storage of sensitive information within the Windows Kernel. An unauthorized attacker could exploit this condition...

PT-2025-42001

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A security flaw exists in Windows Hello, a biometric authentication feature. The issue involves the cleartext transmission of sensitive information, potentially allowing a local attacker to...