EUVD-2025-34297

Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2025-34315

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34407

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

EUVD-2025-34403

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34325

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

EUVD-2025-34333

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34327

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2025-34330

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34336

Time-of-check time-of-use toctou race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-34418

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...

EUVD-2025-34414

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...

EUVD-2025-34415

Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34412

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

GHSA-Q8G5-RW97-F55H Duplicate Advisory: Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w3q9-fxm7-j8fq. This link is maintained to preserve external references. Original Description Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate...

EUVD-2025-34353

Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

EUVD-2025-34428

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34421

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34352

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2025-34431

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

EUVD-2025-34235

An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...