621 matches found
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android, which stems from a logic error in the onCreate function in NotificationAccessConfirmationActivity.java, which could lead to a local elevation of...
Acronis Cyber Protect Cloud Agent 安全漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent build 40734, which stems from insecure folder permissions that could lead to local elevation of privileges...
CVE-2025-50168
Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2025-50173
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-50159
Use after free in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an authorized attacker to elevate privileges locally...
CVE-2025-0309
CVE-2025-0309 describes a local privilege escalation in Netskope Client for Windows due to insufficient validation on the server connection endpoint. An attacker-controlled server using publicly signed TLS certificates can cause the client to send specially crafted responses, enabling privilege e...
CVE-2025-53726
Access of resource using incompatible type 'type confusion' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2025-53721
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-50167
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-49761
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2025-49762
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2025-53724
CVE-2025-53724 is a Windows Push Notifications vulnerability described as a type confusion that allows an authorized, locally authenticated attacker to elevate privileges. The CVE is linked to Windows Push Notifications and is rated with a base score of 7.8 (HIGH) via CVSS 3.1, with attack vector...
CVE-2025-53155
CVE-2025-53155 is a Windows Hyper-V heap-based buffer overflow that enables an authenticated, local attacker to elevate privileges. The initial entry states an local privilege escalation via Hyper-V; connected materials corroborate Windows Hyper-V involvement under the Windows security ecosystem ...
CVE-2025-50168
CVE-2025-50168 is a local privilege-escalation vulnerability in Windows Win32K ICOMP caused by a type-confusion in resource access. The issue affects Win32K-ICOMP and can lead to elevated privileges for an authorized local attacker. Microsoft released August 2025 security updates that fix this vu...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Windows Hyper-V Elevation of Privilege Vulnerability
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking and could lead to local elevation of privilege...
Lastore Daemon 安全漏洞
Lastore Daemon is an open source application from Wuhan deepin Technology Co.,Ltd. A security vulnerability exists in Lastore Daemon version 0.9.53-1 and 0.9.66-1, which stems from improper privilege management and could lead to local elevation of privilege...