PT-2025-41998

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An out-of-bounds read issue exists in the Windows Kernel. A local attacker with limited privileges can exploit this flaw to read kernel memory outside of allocated boundaries,...

PT-2025-42125

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A heap-based buffer overflow exists in the Windows Ancillary Function Driver for WinSock. This issue allows a locally authorized attacker to elevate...

PT-2025-41924

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description APTIOV BIOS contains a flaw that allows a local attacker to perform an Improper Restriction of Operations within the Bounds of a Memory Buffer. Successful exploitation of this issue could lead...

Medium: giflib

Issue Overview: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c CVE-2023-48161 Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. CVE-2024-45993 NOTE:...

PT-2025-42016

Name of the Vulnerable Software and Affected Versions Windows versions prior to the patchday containing the fix. Description A use-after-free condition exists in Windows PrintWorkflowUserSvc. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the...

CVE-2025-11622

Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges...

EUVD-2025-34086

Insecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to escalate their privileges...

CVE-2025-43991

CVE-2025-43991 affects Dell SupportAssist for Home PCs <= 4.8.2 and Dell SupportAssist for Business PCs

CVE-2025-43991

SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link Symlink following vulnerability. A low privileged attacker with local access to the system could potentially exploit this vulnerability to delete arbitrar...

Dell SupportAssist for Business PCs和Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Business PCs and Dell SupportAssist for Home PCs are both products of Dell USA.Dell SupportAssist for Business PCs is a client application for business computers. The program provides automated, proactive and predictive technologies for troubleshooting, etc. Dell...

PT-2025-41788

Name of the Vulnerable Software and Affected Versions SupportAssist for Home PCs versions 4.8.2 and prior SupportAssist for Business PCs versions 4.5.3 and prior Description The software contains a UNIX Symbolic Link Symlink following issue. A local attacker with limited privileges could...

CVE-2025-11649

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account Handler. Performing manipulation results in use of hard-coded password. The attack must be initiated from a local position. The attack is considered to have hig...

CVE-2025-21067

Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

CVE-2025-21062

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...

CVE-2025-21048

Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code...

CVE-2025-21053

Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption...

CVE-2025-21066

Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

CVE-2025-21070

Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory...

CVE-2025-21069

Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

CVE-2025-21062

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...