Lucene search
+L

34170 matches found

Microsoft CVE
Microsoft CVE
added 2025/12/09 8:00 a.m.9 views

Windows File Explorer Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

7.3CVSS7.1AI score0.00553EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/09 8:00 a.m.17 views

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7AI score0.00392EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/09 8:00 a.m.13 views

Application Information Service Elevation of Privilege Vulnerability

Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally...

7.8CVSS6.8AI score0.00392EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.7 views

PT-2025-50162

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A buffer over-read exists in Windows Projected File System. A successful exploit could allow an authorized attacker to elevate privileges locally. This issue allows...

7.8CVSS6.4AI score0.00392EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.5 views

PT-2025-50167

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An issue exists in Windows Projected File System that could allow a locally authenticated attacker to gain elevated privileges. The issue is due to an integer overflow o...

7.8CVSS6.6AI score0.00392EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.7 views

PT-2025-50196

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A flaw exists in Windows Shell related to concurrent execution using a shared resource with improper synchronization, creating a race condition. This can allow a locally authenticated...

7.5CVSS6.5AI score0.00305EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2025/12/09 12:00 a.m.11 views

Microsoft Windows win32kbase Out-Of-Bounds Access Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kbase...

8.8CVSS7.3AI score0.00667EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.10 views

PT-2025-50160

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description The issue involves multiple local privilege escalation flaws within Microsoft Windows. A heap-based buffer overflow exists in Windows Win32K - GRFX, potentially allowing an...

7.8CVSS6AI score0.00667EPSS
SaveExploits0References15
Zero Day Initiative
Zero Day Initiative
added 2025/12/09 12:00 a.m.15 views

Schneider Electric PowerChute Serial Shutdown Directory Traversal Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric PowerChute Serial Shutdown. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the...

6.7CVSS7.4AI score0.00544EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.15 views

PT-2025-50135

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an unsafe DLL loading issue that could allow a local attacker to execute arbitrary code. The MailEnable administrative executable attempts to load MEAINFY.D...

8.5CVSS7.2AI score0.00188EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.6 views

PT-2025-50203

Name of the Vulnerable Software and Affected Versions Storvsp.sys Driver affected versions not specified Description An improper access control issue exists within the Storvsp.sys Driver. This allows a local attacker who is already authorized to elevate their privileges on the system. The issue...

7.8CVSS6AI score0.00355EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.3 views

PT-2025-50152

Name of the Vulnerable Software and Affected Versions Windows Storage VSP Driver affected versions not specified Description A security issue exists in the Windows Storage VSP Driver that allows a local attacker to gain elevated privileges. The problem stems from a lack of proper authentication f...

7.8CVSS6.9AI score0.02289EPSS
SaveExploits0References6
VulnCheck KEV
VulnCheck KEV
added 2025/12/09 12:00 a.m.11 views

VulnCheck KEV: CVE-2025-62221

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.02416EPSS
SaveIn wildExploits2References7
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.6 views

PT-2025-50155

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 10 and later Description A use-after-free issue exists in the Windows Cloud Files Mini Filter Driver, specifically within the cldflt.sys driver used by services such as Microsoft OneDrive. A use-after-free is a...

7.8CVSS7AI score0.02416EPSS
SaveExploits2References66
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.9 views

PT-2025-50205

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Windows DWM Core Library that could allow a local attacker to gain higher privileges on a system. The issue is a heap-based buffer overflow. An authorized attacker can...

7.8CVSS9.6AI score0.00459EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2025/12/09 12:00 a.m.12 views

Microsoft Windows win32kfull Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS7.3AI score0.00667EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/09 12:00 a.m.13 views

Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

8.8CVSS7.3AI score0.00667EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.5 views

PT-2025-50197

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A flaw in Windows Shell related to concurrent execution using a shared resource with improper synchronization, specifically a race condition, can allow a locally authenticated attacker ...

7.8CVSS6.5AI score0.00244EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.13 views

PT-2025-49864

Name of the Vulnerable Software and Affected Versions AlgoSec Firewall Analyzer versions A33.0 through A33.10 Description A flaw exists in AlgoSec Firewall Analyzer that could allow a local user with command line access to elevate their privileges. This is due to improper handling of parameters...

7.8CVSS6.8AI score0.00156EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.7 views

PT-2025-50153

Name of the Vulnerable Software and Affected Versions Windows Storage VSP Driver affected versions not specified Description A flaw in access control within the Windows Storage VSP Driver can allow a local attacker to gain higher privileges on a system. This issue allows attackers to affect the...

7.8CVSS6.2AI score0.02378EPSS
SaveExploits0References5
Rows per page
Query Builder