CVE-2025-54912

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

CVE-2025-54900

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-54895

Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally...

CVE-2025-54098

Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-54091

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-53807

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

Windows BitLocker Elevation of Privilege Vulnerability

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Windows Kernel Memory Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally...

Windows BitLocker Elevation of Privilege Vulnerability

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Windows MultiPoint Services Elevation of Privilege Vulnerability

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally...

PT-2025-36874

Name of the Vulnerable Software and Affected Versions: Microsoft Office PowerPoint affected versions not specified Description: A use after free issue exists in Microsoft Office PowerPoint. This issue allows an unauthorized attacker to execute code locally. The vulnerability enables remote...

PT-2025-36892

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Graphics Kernel. This condition allows a local attacker with authorization to execute code. The vulnerability also...

PT-2025-36884

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: A race condition exists due to improper synchronization when using a shared resource during concurrent execution. This allows a local attacker to elevate privileges. Recommendations...

PT-2025-36826

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: A vulnerability allows attackers to obtain sensitive information and affect the system. The Windows Kernel generates error messages containing sensitive information, potentially...

PT-2025-36879

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue exists within the Windows Defender Firewall Service. This flaw enables a locally authenticated attacker to gain elevated privileges on the...

PT-2025-36822

Name of the Vulnerable Software and Affected Versions: Windows Imaging Component affected versions not specified Description: The Windows Imaging Component contains a flaw in its resource handling. This issue allows a local attacker to disclose information. The vulnerability enables attackers to...

PT-2025-36856

Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The Windows Connected Devices Platform Service contains a race condition due to improper synchronization during concurrent execution using a shared...