34167 matches found
Google Pixel 安全漏洞
Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in WAVESsenddatatodsp in libaocwaves.c, which could lead to local elevation of privilege...
EulerOS 2.0 SP11 : udisks2 (EulerOS-SA-2025-2472)
According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...
PT-2025-50711
In GetHostAddress of gxp buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-50708
In GetTachyonCommand of tachyon server common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Pixel 安全漏洞
Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from the lack of boundary checking in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...
(0Day) PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the target system in order to exploit this vulnerability. The specific flaw exists within the...
PT-2025-50783
Name of the Vulnerable Software and Affected Versions Soda PDF Desktop affected versions not specified Description A local privilege escalation issue exists in Soda PDF Desktop due to an uncontrolled search path element. This allows for potential exploitation, leading to privilege escalation...
PT-2025-50709
In GetHostAddress of gxp buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Pixel 安全漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker to cause local elevation of privilege...
PT-2025-50715
Name of the Vulnerable Software and Affected Versions Apache affected versions not specified Description A memory corruption issue exists due to uninitialized data within the trusty ffa mem reclaim function in shared-mem-smcall.c. This could allow for local escalation of privilege without requiri...
PT-2025-50782
Name of the Vulnerable Software and Affected Versions PDFsam Enhanced affected versions not specified Description A local privilege escalation issue exists in PDFsam Enhanced. A physically-present attacker can exploit this by mounting a malicious drive onto the target system and leveraging a flaw...
PT-2025-50714
Name of the Vulnerable Software and Affected Versions Google Bigo affected versions not specified Description The issue is a use after free condition occurring in the bigo worker thread of private/google-modules/video/gchips/bigo.c due to a race condition. This could lead to local escalation of...
(0Day) Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration o...
CVE-2025-34396
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAINFY.DLL from its application directo without sufficient integrity validation or secure search order. If the...
CVE-2025-64661
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2025-55233
Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2025-64679
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-62455
Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally...