27740 matches found
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-54912
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2025-54912
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2025-54900
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-54895
Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally...
CVE-2025-54098
Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-54091
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-53807
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Windows BitLocker Elevation of Privilege Vulnerability
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...
Microsoft Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Windows BitLocker Elevation of Privilege Vulnerability
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...
Windows MultiPoint Services Elevation of Privilege Vulnerability
Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally...
Windows Hyper-V Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Windows Kernel Memory Information Disclosure Vulnerability
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally...
PT-2025-36874
Name of the Vulnerable Software and Affected Versions: Microsoft Office PowerPoint affected versions not specified Description: A use after free issue exists in Microsoft Office PowerPoint. This issue allows an unauthorized attacker to execute code locally. The vulnerability enables remote...
PT-2025-36892
Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Graphics Kernel. This condition allows a local attacker with authorization to execute code. The vulnerability also...
PT-2025-36884
Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: A race condition exists due to improper synchronization when using a shared resource during concurrent execution. This allows a local attacker to elevate privileges. Recommendations...
PT-2025-36826
Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: A vulnerability allows attackers to obtain sensitive information and affect the system. The Windows Kernel generates error messages containing sensitive information, potentially...
PT-2025-36879
Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue exists within the Windows Defender Firewall Service. This flaw enables a locally authenticated attacker to gain elevated privileges on the...