EUVD-2025-34374

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

EUVD-2025-34395

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34293

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

EUVD-2025-34289

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34388

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2025-34300

Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34297

Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2025-34315

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34407

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

EUVD-2025-34403

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34325

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

EUVD-2025-34333

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34336

Time-of-check time-of-use toctou race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-34327

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2025-34418

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...

EUVD-2025-34330

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34414

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...

EUVD-2025-34415

Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34412

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

GHSA-Q8G5-RW97-F55H Duplicate Advisory: Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w3q9-fxm7-j8fq. This link is maintained to preserve external references. Original Description Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate...