EUVD-2025-202230

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-202233

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-202243

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-202250

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-46636

Dell Encryption (versions prior to 11.12.1) is affected by an Improper Link Resolution Before File Access ("Link Following") vulnerability. A low-privilege, local attacker could exploit this to tamper with information. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with...

CVE-2025-46637

Dell Encryption (pre-11.12.1) contains an Improper Link Resolution Before File Access (Link Following) vulnerability that could allow a local attacker to achieve Elevation of Privileges. Affected component: Dell Encryption software; vulnerable version range: prior to 11.12.1. Exploit details are ...

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

AZL-72556 CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...

CVE-2024-38798

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality...

UBUNTU-CVE-2025-2296

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...

BIT-FLUENT-BIT-2025-29477

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

CVE-2025-40830

CVE-2025-40830 affects Siemens SINEC Security Monitor before version 4.10.0. The issue is missing authorization checks for the file_transfer feature in ssmctl-client, enabling an authenticated, low-priv local attacker to read or write arbitrary files on the server or sensor. Mitigation: upgrade t...

Windows Projected File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

DirectX Graphics Kernel Denial of Service Vulnerability

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally...

CVE-2025-65289

Summary: CVE-2025-65289 is a stored XSS vulnerability in Mercury MR816v2 routers (version 4.8.7 Build 110427 Rel 36550n). A LAN attacker can inject JavaScript into the router’s management UI via a malicious hostname, with the script executing in an administrator’s browser context after events lik...