88 matches found
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
CVE-2025-49723 affects Windows StateRepository API, enabling local tampering of data due to missing authorization in the Server file path. The CNVD/NCSC entries confirm impact as manipulation of data with a high CVSS (8.8) and local attack vector; no public exploitation details are provided in th...
PT-2025-28612 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue concerns missing authorization in the Windows StateRepository API, allowing an authorized attacker to perform local tampering. This means that an attacker with certain privileges...
PT-2024-14845 · Arc · Arc
Name of the Vulnerable Software and Affected Versions: Arc affected versions not specified Description: The issue concerns the use of a temporary file with unsafe privileges on Unix systems, including Linux and MacOS. A malicious local user may be able to tamper with this file, potentially...
UBUNTU-CVE-2024-34490
In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...
AZL-28510 CVE-2023-38497 affecting package rust for versions less than 1.72.0-2
Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files writeable by any local...