CVE-2019-1380

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...

CVE-2019-0880

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...

Intel Graphics 安全漏洞

Intel Graphics is a family of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Graphics that stems from an improperly set default privilege, which could lead to local elevation of privilege...

IXON VPN Client 安全漏洞

IXON VPN Client is an industrial equipment remote secure access solution from IXON, a VPN client optimized for the IXON Cloud platform. A security vulnerability exists in IXON VPN Client versions prior to 1.4.4, which stems from a competitive condition that could lead to local elevation of...

Google Pixel Local Elevation of Privilege Vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a local elevation of privilege vulnerability, which stems from a logic error in the s2mpu.c file, which can be used to bypass mitigations and can be exploited by an attacker to perform a local elevatio...

Micro-Star MSI Center 安全漏洞

Micro-Star MSI Center is a monitoring and management platform from Micro-Star China. You can find all your favorite features such as Game Mode or Smart Priority in the Feature Set page. A security vulnerability exists in Micro-Star MSI Center versions prior to 2.0.52.0, which stems from a TOCTOU...

Patch Tuesday - April 2025

Microsoft is addressing 121 vulnerabilities this April 2025 Patch Tuesday, which is more than twice as many as last month. Microsoft has evidence of in-the-wild exploitation for just one of the vulnerabilities published today, which is already reflected in CISA KEV. Once again, Microsoft has...

Patch Tuesday - April 2025

Microsoft is addressing 121 vulnerabilities this April 2025 Patch Tuesday, which is more than twice as many as last month. Microsoft has evidence of in-the-wild exploitation for just one of the vulnerabilities published today, which is already reflected in CISA KEV. Once again, Microsoft has...

CVE-2025-27489 Azure Local Elevation of Privilege Vulnerability

...

PT-2025-15551

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to elevate privileges...

Microsoft Visual Studio Code 访问控制错误漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Visual Studio Code that stems from improper access control and could result in local elevation of privilege...

Cisco IOS XR Software CLI Local Elevation of Privilege Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. A local elevation of privilege vulnerability exists in the Cisco IOS XR Software CLI. The vulnerability is due to insufficient validation of user parameters passed to specific CLI...

MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a lack of boundary checking and could lead to local elevation of privilege...

Dell Update Package Framework Local Elevation of Privilege Vulnerability

Dell Update Package Framework is a framework for updating system components from Dell USA. The product focuses on providing installers for drivers, applications, BIOS, and firmware. The Dell Update Package Framework suffers from a local elevation of privilege vulnerability that originates from a...

PT-2025-5908 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.1.2 Description: The issue allows a local attacker to cause the common permission to be upgraded to root and sensitive information to leak through a buffer overflow. Recommendations: For OpenHarmony versions...

Epic Games Launcher 安全漏洞

Epic Games Launcher is a game software launcher from Epic Games USA. A security vulnerability exists in Epic Games Launcher that stems from an incorrect default privilege local elevation of privilege that allows a local attacker to elevate the privileges of an affected Epic Games Launcher...

Foxit PDF Editor Elevation of Privilege Vulnerability

Foxit PDF Editor is China Foxit Foxit company a PDF editor. A security vulnerability exists in Foxit PDF Editor, which can be exploited by attackers to cause a local elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from a privilege bypass issue in the installPackageLI method in the PackageManagerService.java file, which could lead to local elevatio...

Malwarebytes Anti-Malware 后置链接漏洞

Malwarebytes Anti-Malware is a Windows-based security protection software from Malwarebytes. The software is capable of detecting and removing ransomware, malware, and more. Malwarebytes Anti-Malware suffers from a backlink vulnerability that stems from the presence of a local elevation of...

CVE-2018-9371

In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficient blacklisting/whitelisting. This could lead to local elevation of privilege, given physical access to the device with no additional...