PT-2025-38607

Name of the Vulnerable Software and Affected Versions Vasion Print affected versions not specified Description Vasion Print Virtual Appliance Host and Application macOS/Linux client deployments are vulnerable to an authentication bypass in the PrinterInstallerClientService. The service’s checks f...

CVE-2025-59220

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59215

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59220

CVE-2025-59220 involves a race condition in the Microsoft Windows Bluetooth Service, caused by improper synchronization of shared resources. The vulnerability enables an authenticated, local attacker to elevate privileges. The connected CNVD entry describes a resource-management error in the Wind...

CVE-2025-59216

CVE-2025-59216 concerns Microsoft Graphics Component, a graphics driver component. The vulnerability arises from a race-condition caused by improper synchronization when accessing a shared resource, enabling a local attacker with low privileges to elevate privileges. Public sources describe the i...

CVE-2025-59215

CVE-2025-59215 is a Windows Graphics Component elevation-of-privilege vulnerability. Multiple sources describe a use-after-free/resource-management error in the Microsoft Graphics Component that can allow an authenticated, local attacker to obtain higher privileges. The NVD entry notes local priv...

CVE-2025-36244

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...

CVE-2025-55115

A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. This vulnerability wa...

CVE-2025-10016

The Sparkle framework includes a helper tool Autoupdate. Due to lack of authentication of connecting clients a local unprivileged attacker can request installation of crafted malicious PKG file by racing to connect to the daemon when other app spawns it as root. This results in local privilege...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

BMC Control-M Stack Buffer Overflow Vulnerability (CNVD-2025-22539)

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. BMC Control-M suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

PT-2025-38494

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Service affected versions not specified Description A race condition exists within the Windows Bluetooth Service due to concurrent execution using a shared resource with improper synchronization. This allows an authorized...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Graphics Component that stems from improper synchronization of shared resources and can be exploited by an attacker to cause a local elevation o...

CVE-2025-57624

A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code via multiple DLLs...

CVE-2025-55116

A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions...

CVE-2025-55115

A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. This vulnerability wa...

CVE-2025-55116 BMC Control-M/Agent buffer overflow local privilege escalation

A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions...

CVE-2025-55116

The CVE-2025-55116 issue affects BMC Control-M/Agent, specifically versions 9.0.18–9.0.20 (potentially earlier unsupported builds). It is caused by a stack/buffer overflow in the Agent running on the target system, enabling local privilege escalation when an attacker has system access. Mitigation...

CVE-2025-55116 BMC Control-M/Agent buffer overflow local privilege escalation

A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions...

CVE-2025-55115 BMC Control-M/Agent path traversal local privilege escalation

A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. This vulnerability wa...