PT-2025-24877

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to improper privilege management, allowing an authorized attacker to elevate privileges locally. There is no information provided about...

Razer Synapse 4 安全漏洞

Razer Synapse 4 is an application from the American company Razer, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 4 4.0.86.2502180127 and prior versions, which stems from a COM interface vulnerability that could lead to local elevation of...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from insufficient input validation, which could lead to local elevation of privilege...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to local elevation of privilege...

Intel QAT software code issue vulnerability

Intel QAT software refers to the collection of software components that support Intel QuickAssist technology. A code issue vulnerability exists in Intel QAT software that stems from an uncontrolled search path that can be exploited by an attacker to cause a local elevation of privilege...

CVE-2023-21393

In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

GStreamer 安全漏洞

GStreamer is a GStreamer open source set of frameworks for processing streaming media. A security vulnerability exists in GStreamer versions prior to 1.25.1, which stems from improperly assigned permissions in the installer and may result in local elevation of privileges...

CVE-2025-47161

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

CVE-2025-29970

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-27488

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally...

Intel QAT 代码问题漏洞

Intel QAT software refers to the collection of software components that support Intel QuickAssist technology. A code issue vulnerability exists in Intel QAT software that stems from an uncontrolled search path that can be exploited by an attacker to cause a local elevation of privilege...

PT-2025-20943 · Microsoft · Windows Hardware Lab Kit

Name of the Vulnerable Software and Affected Versions: Windows Hardware Lab Kit affected versions not specified Description: The issue concerns the use of hard-coded credentials in the software, which allows an authorized attacker to elevate privileges locally. There is no information provided...

MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets is a family of chips from China's MediaTek Corporation MediaTek. A buffer error vulnerability exists in MediaTek Chipsets that stems from a lack of boundary checking and could lead to local elevation of privilege...

CVE-2025-23375

Dell PowerProtect Data Manager Reporting, versions 19.17, contains an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Protect Cloud Agent versions prior to 39904, which stems from insecure folder permissions that could lead to local elevation of privileges...

CVE-2025-29801

Incorrect default permissions in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

CVE-2025-27731

Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2025-27492

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking and could lead to local elevation of privilege...

Valmet DNA 安全漏洞

Valmet DNA is a platform for automation and information systems from the Finnish company Valmet. In this single platform, process control, machine control, quality control, drive control and equipment condition monitoring systems are covered. A security vulnerability exists in Valmet DNA versions...