CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2025-34379

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2025-34395

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34414

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...

EUVD-2025-34415

Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34353

Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-59205

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-59207

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-59199

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

CVE-2025-59194

Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-58725

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

CVE-2025-58719

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2025-58714

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-58715

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

CVE-2025-50175

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-55697 Azure Local Elevation of Privilege Vulnerability

...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...