CVE-2025-9968

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

PT-2025-42002

Name of the Vulnerable Software and Affected Versions Windows Digital Media affected versions not specified Description A use after free condition exists in Windows Digital Media that could allow an attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no...

SUSE SLES12 Security Update : open-vm-tools (SUSE-SU-2025:03585-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03585-1 advisory. - CVE-2025-41244: fixed a local privilege escalation vulnerability bnc1250373. Tenable has extracted the preceding description block directly from the...

PT-2025-42044

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An improper access control issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

Important: open-vm-tools

Issue Overview: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability ...

PT-2025-42063

Name of the Vulnerable Software and Affected Versions Windows Connected Devices Platform Service affected versions not specified Description A race condition exists within the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper...

PT-2025-42035

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A use-after-free condition exists in the Windows PrintWorkflowUserSvc component. This occurs when a program uses a pointer to memory after it has been freed, potentially leading to...

PT-2025-42139

Name of the Vulnerable Software and Affected Versions Windows Authentication Methods affected versions not specified Description An improper validation of a specific input type within Windows Authentication Methods can allow a local attacker to gain elevated privileges. Recommendations At the...

PT-2025-42079

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue with input validation in the Windows Kernel could allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer...

PT-2025-41873

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate...

PT-2025-42084

Name of the Vulnerable Software and Affected Versions Storport.sys affected versions not specified Description A buffer over-read issue exists in the Storport.sys driver. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no...

PT-2025-41944

Name of the Vulnerable Software and Affected Versions FortiSOAR versions 7.3.x FortiSOAR versions 7.4.x FortiSOAR versions 7.5.0 through 7.5.1 FortiSOAR versions 7.6.0 through 7.6.1 Description An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' issue CWE-7...

PT-2025-41954

Name of the Vulnerable Software and Affected Versions FortiClient versions 7.0 through 7.2.9 FortiClient versions 7.4.2 and below Description An issue exists in FortiClient for macOS where improper verification of cryptographic signatures may allow a local user to escalate privileges through...

PT-2025-42020

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use after free condition exists in Windows NTFS. This allows an unauthorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newe...

PT-2025-42140

Name of the Vulnerable Software and Affected Versions Windows Authentication Methods affected versions not specified Description An issue exists in Windows Authentication Methods where improper validation of input allows a local attacker to gain elevated privileges. Recommendations At the moment,...

PT-2025-42030

Name of the Vulnerable Software and Affected Versions Windows versions prior to October 2025 Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Cloud Files Mini Filter Driver. This condition allows a locally authorized attacker to elevate privileges. The issue ste...

PT-2025-41869

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw that allows for a potential out-of-bounds write due to an incorrect bounds check. Successful exploitation of this issue could lead to local escalatio...

PT-2025-42085

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges locally...

PT-2025-42132

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue could allow a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...

PT-2025-42051

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue involving improper validation of input types exists in Microsoft Windows. This can allow a local attacker to gain elevated privileges. Recommendations At the moment, there ...