PT-2025-42114

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An uncaught exception in Microsoft Office can allow an unauthorized attacker to cause a denial of service locally. Recommendations At the moment, there is no information about a newe...

PT-2025-42000

Name of the Vulnerable Software and Affected Versions Windows Digital Media affected versions not specified Description A use-after-free issue exists in Windows Digital Media. This flaw allows an attacker with local access to escalate privileges on the affected system. The issue occurs due to...

PT-2025-42004

Name of the Vulnerable Software and Affected Versions Xbox affected versions not specified Description A use-after-free condition exists in Xbox, potentially allowing an authorized attacker to elevate privileges locally. This issue stems from improper memory management. An attacker with some leve...

PT-2025-42053

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An integer overflow or wraparound exists in Microsoft Windows Speech. This flaw allows a local attacker to elevate privileges. An integer overflow happens when a calculation...

PT-2025-42150

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free condition exists in the Windows Bluetooth Service. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

PT-2025-42124

Name of the Vulnerable Software and Affected Versions Windows Health and Optimized Experiences Service affected versions not specified Description An issue exists in Windows Health and Optimized Experiences Service related to improper link resolution before file access, also known as 'link...

PT-2025-41998

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An out-of-bounds read issue exists in the Windows Kernel. A local attacker with limited privileges can exploit this flaw to read kernel memory outside of allocated boundaries,...

PT-2025-42026

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description The Windows USB Video Driver exhibits a flaw where the generation of error messages can expose sensitive information locally to an authorized attacker. The issue allows for t...

PT-2025-42086

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue involving the use of an uninitialized resource exists in the Windows Kernel. This can allow a locally authorized attacker to gain elevated privileges. There are an estimated 1...

PT-2025-41924

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description APTIOV BIOS contains a flaw that allows a local attacker to perform an Improper Restriction of Operations within the Bounds of a Memory Buffer. Successful exploitation of this issue could lead...

PT-2025-42045

Name of the Vulnerable Software and Affected Versions Windows WLAN Auto Config Service affected versions not specified Description An out-of-bounds read issue exists in the Windows WLAN Auto Config Service. This allows an authorized attacker to potentially disclose information locally...

PT-2025-42078

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists in the Windows Kernel that allows an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to an unauthorized...

PT-2025-42125

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A heap-based buffer overflow exists in the Windows Ancillary Function Driver for WinSock. This issue allows a locally authorized attacker to elevate...

Medium: giflib

Issue Overview: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c CVE-2023-48161 Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. CVE-2024-45993 NOTE:...

PT-2025-42016

Name of the Vulnerable Software and Affected Versions Windows versions prior to the patchday containing the fix. Description A use-after-free condition exists in Windows PrintWorkflowUserSvc. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the...

CVE-2025-11622

Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges...

EUVD-2025-34086

Insecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to escalate their privileges...

CVE-2025-43991

SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link Symlink following vulnerability. A low privileged attacker with local access to the system could potentially exploit this vulnerability to delete arbitrar...

CVE-2025-43991

CVE-2025-43991 affects Dell SupportAssist for Home PCs <= 4.8.2 and Dell SupportAssist for Business PCs

Dell SupportAssist for Business PCs和Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Business PCs and Dell SupportAssist for Home PCs are both products of Dell USA.Dell SupportAssist for Business PCs is a client application for business computers. The program provides automated, proactive and predictive technologies for troubleshooting, etc. Dell...