CVE-2025-48815: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48816: Integer Overflow or Wraparound

Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally...

PT-2025-28529

Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The issue is related to a use after free condition in the Windows Connected Devices Platform Service, which allows an authorized attacker to elevate...

CVE-2025-49732: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-21195: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...

CVE-2025-47987: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally...

KB5062560: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2025)

The remote Windows host is missing security update 5062560. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...

CVE-2025-27446

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIXjava-plugin-runner. Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIXjava-plugin-runner: from 0.2.0 through 0.5.0. Users are...

HPESBGN04876 rev.2 - HPE OneView for VMware vCenter (OV4VC) and Compute Ops Management plug-in for VMware vCenter (COM4VC), Local Elevation of of Privilege

Potential Security Impact: Local: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight - All versions prior to v11.7 HPE Compute Ops Management - All versions prior to v1.4 CVSS Scores: | CVE ...

Trend Micro Security 安全漏洞

Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from improper link following and could lead to local elevation of privilege...

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from an uncontrolled search path that could lead to local elevation of privilege...

TencentOS Server 3: tigervnc (TSSA-2023:0151)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0151 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: xorg-x11-server (TSSA-2023:0102)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0102 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-32716

Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2025-24852 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to improper privilege management in the Windows Kernel, allowing an unauthorized attacker to elevate privileges locally. Recommendations: At the moment, there is...

PT-2025-24877

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to improper privilege management, allowing an authorized attacker to elevate privileges locally. There is no information provided about...

CVE-2025-33067: Improper Privilege Management

Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally...

Razer Synapse 4 安全漏洞

Razer Synapse 4 is an application from the American company Razer, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 4 4.0.86.2502180127 and prior versions, which stems from a COM interface vulnerability that could lead to local elevation of...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from insufficient input validation, which could lead to local elevation of privilege...