PT-2025-43493

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. Exploitation of this issue may allow an attacker to escalate privileges...

PT-2025-43471

Name of the Vulnerable Software and Affected Versions affected versions not specified Description There is a potential for media deletion without the necessary MANAGE EXTERNAL STORAGE permission due to an intent redirect. This could result in local escalation of privilege and does not require use...

PT-2025-43459

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component related to insufficient protection of system data. Successful exploitation may allow a remote attacker to elevate privileges. The issue involv...

PT-2025-43961

Name of the Vulnerable Software and Affected Versions Docker Desktop versions through 4.48.0 Description The Docker Desktop Installer.exe is susceptible to a DLL hijacking issue stemming from an insecure DLL search order. The installer prioritizes searching for necessary DLLs within the user's...

PT-2025-43485

In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-43507

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-43465

Name of the Vulnerable Software and Affected Versions CertInstaller.java affected versions not specified Description The software contains a flaw in multiple functions that may allow for the installation of certificates due to a permissions bypass. This could result in local escalation of privile...

PT-2025-43463

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. This issue may allow a remote attacker to elevate privileges. The iss...

PT-2025-43486

Name of the Vulnerable Software and Affected Versions KeyguardViewMediator affected versions not specified Description A logic error exists in the exitKeyguardAndFinishSurfaceBehindRemoteAnimation function within KeyguardViewMediator.java. This could allow a lockscreen bypass, potentially leading...

PT-2025-43455

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2025-43475

In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-62525 OpenWrt vulnerable to local privilage escalation

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using the ioctls of the ltq-ptm driver which is used to drive the datapath of the DSL line. This only effects the lantiq target supporting...

Oracle Solaris Resource Management Error Vulnerability

Oracle Solaris is a Unix-like operating system developed by Oracle. A file system component vulnerability exists in Oracle Solaris version 11 that stems from a flaw in the system privilege validation mechanism. An attacker could use this vulnerability to cause a complete denial of service sustain...

TencentOS Server 4: open-vm-tools (TSSA-2025:0776)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0776 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Privilege Escalation

PyInstaller is vulnerable to Privilege Escalation. The vulnerability is due to the bootstrap process appending a special entry to sys.path and attempting to load an optional bytecode-decryption module while that entry is present, which allows an attacker who can create files/directories next to t...

PT-2025-43001

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 through 7.2.2 Description An issue exists in the Oracle VM VirtualBox product, specifically within the Core component. A high-privileged attacker with local access can compromise Oracle VM VirtualBox,...

PT-2025-43002

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 through 7.2.2 Description A flaw exists in the Oracle VM VirtualBox product, specifically within the Core component. A highly privileged attacker with local access can compromise the VirtualBox environment...

RLSA-2025:17428 Important: open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fixes: open-vm-tools: Local privilege escalation in open-vm-tools...

RockyLinux 9 : open-vm-tools (RLSA-2025:17428)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:17428 advisory. open-vm-tools: Local privilege escalation in open-vm-tools CVE-2025-41244 Tenable has extracted the preceding description block directly from the RockyLinux...

ASUS Armoury Crate Improper Link Following Vulnerability

ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a link following improper vulnerability that can be exploited by an attacker to cause a local elevation of privilege...