PT-2025-42001

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A security flaw exists in Windows Hello, a biometric authentication feature. The issue involves the cleartext transmission of sensitive information, potentially allowing a local attacker to...

PT-2025-42087

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization within the Microsoft Graphics Component. This allows a local...

PT-2025-42027

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows Device Association Broker service where an untrusted pointer dereference can occur. This allows an authorized attacker to gain elevated privileges on a local...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating systems dedicated to the FortiGate network security platform from the American company Fiat Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A...

Cisco IOS XE Software CLI DoS (cisco-sa-ios-cli-EB7cZ6yO)

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. An attacker with a low-privileged account could exploit this vulnerability by...

PT-2025-42094

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition exists in Windows Remote Desktop Services. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2025-42053

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An integer overflow or wraparound exists in Microsoft Windows Speech. This flaw allows a local attacker to elevate privileges. An integer overflow happens when a calculation...

PT-2025-42000

Name of the Vulnerable Software and Affected Versions Windows Digital Media affected versions not specified Description A use-after-free issue exists in Windows Digital Media. This flaw allows an attacker with local access to escalate privileges on the affected system. The issue occurs due to...

PT-2025-42028

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use after free condition exists in Windows DirectX. This allows a local attacker who is authorized to elevate privileges. Recommendations At the moment, there is no information abou...

PT-2025-42114

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An uncaught exception in Microsoft Office can allow an unauthorized attacker to cause a denial of service locally. Recommendations At the moment, there is no information about a newe...

PT-2025-42031

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Desktop Window Manager DWM of Windows operating systems. Exploitation of this issue can allow an attacker to elevate privileges locally. The...

PT-2025-42059

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in Windows Desktop Window Manager DWM. A local attacker can exploit this to gain elevated privileges. Recommendations At the moment, there is no...

PT-2025-42150

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free condition exists in the Windows Bluetooth Service. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

PT-2025-41996

Name of the Vulnerable Software and Affected Versions Versions prior to 2025 Description The use of a key after its expiration date within Virtual Secure Mode can allow a local attacker to perform spoofing. Recommendations At the moment, there is no information about a newer version that contains...

PT-2025-42004

Name of the Vulnerable Software and Affected Versions Xbox affected versions not specified Description A use-after-free condition exists in Xbox, potentially allowing an authorized attacker to elevate privileges locally. This issue stems from improper memory management. An attacker with some leve...

PT-2025-42026

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description The Windows USB Video Driver exhibits a flaw where the generation of error messages can expose sensitive information locally to an authorized attacker. The issue allows for t...

PT-2025-42078

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists in the Windows Kernel that allows an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to an unauthorized...

PT-2025-42086

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue involving the use of an uninitialized resource exists in the Windows Kernel. This can allow a locally authorized attacker to gain elevated privileges. There are an estimated 1...

PT-2025-42045

Name of the Vulnerable Software and Affected Versions Windows WLAN Auto Config Service affected versions not specified Description An out-of-bounds read issue exists in the Windows WLAN Auto Config Service. This allows an authorized attacker to potentially disclose information locally...

PT-2025-42124

Name of the Vulnerable Software and Affected Versions Windows Health and Optimized Experiences Service affected versions not specified Description An issue exists in Windows Health and Optimized Experiences Service related to improper link resolution before file access, also known as 'link...