Windows Search Service Denial of Service Vulnerability

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Health and Optimized Experiences Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

PT-2025-42029

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An improper input validation issue exists in the Windows Kernel. This allows a local, unauthorized attacker to disclose information. Recommendations At the moment, there is no...

PT-2025-42019

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A security feature bypass is possible locally due to the cleartext storage of sensitive information within the Windows Kernel. An unauthorized attacker could exploit this condition...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating systems dedicated to the FortiGate network security platform from the American company Fiat Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A...

PT-2025-42091

Name of the Vulnerable Software and Affected Versions Software Protection Platform affected versions not specified Description Improper access control in the Software Protection Platform SPP, specifically within the Sppsvc.exe service, allows an authorized attacker to elevate privileges locally...

PT-2025-42001

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A security flaw exists in Windows Hello, a biometric authentication feature. The issue involves the cleartext transmission of sensitive information, potentially allowing a local attacker to...

PT-2025-41974

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description An improper access control issue exists in Microsoft PowerShell. This allows an authorized attacker with local access to elevate privileges. The flaw enables privilege escalation...

PT-2025-41922

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description APTIOV BIOS contains a flaw that allows a local attacker to trigger an Out-of-bounds Write. Successful exploitation of this issue may result in data corruption and a loss of system availabilit...

PT-2025-42092

Name of the Vulnerable Software and Affected Versions Data Sharing Service Client affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows a local attacker to perform spoofing. Approximately...

PT-2025-42133

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue allows a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...

PT-2025-42087

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization within the Microsoft Graphics Component. This allows a local...

PT-2025-42027

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows Device Association Broker service where an untrusted pointer dereference can occur. This allows an authorized attacker to gain elevated privileges on a local...

PT-2025-42046

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in the NtQueryInformationToken function within ntifs.h. This condition allows a locally authorized attacker to elevate privileges. The...

Cisco IOS XE Software CLI DoS (cisco-sa-ios-cli-EB7cZ6yO)

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. An attacker with a low-privileged account could exploit this vulnerability by...

PT-2025-41996

Name of the Vulnerable Software and Affected Versions Versions prior to 2025 Description The use of a key after its expiration date within Virtual Secure Mode can allow a local attacker to perform spoofing. Recommendations At the moment, there is no information about a newer version that contains...

PT-2025-42094

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition exists in Windows Remote Desktop Services. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2025-42031

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Desktop Window Manager DWM of Windows operating systems. Exploitation of this issue can allow an attacker to elevate privileges locally. The...

PT-2025-42028

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use after free condition exists in Windows DirectX. This allows a local attacker who is authorized to elevate privileges. Recommendations At the moment, there is no information abou...

PT-2025-42059

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A heap-based buffer overflow exists in Windows Desktop Window Manager DWM. A local attacker can exploit this to gain elevated privileges. Recommendations At the moment, there is no...