PT-2025-42079

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue with input validation in the Windows Kernel could allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer...

Important: open-vm-tools

Issue Overview: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability ...

PT-2025-42035

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A use-after-free condition exists in the Windows PrintWorkflowUserSvc component. This occurs when a program uses a pointer to memory after it has been freed, potentially leading to...

PT-2025-42002

Name of the Vulnerable Software and Affected Versions Windows Digital Media affected versions not specified Description A use after free condition exists in Windows Digital Media that could allow an attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no...

PT-2025-42139

Name of the Vulnerable Software and Affected Versions Windows Authentication Methods affected versions not specified Description An improper validation of a specific input type within Windows Authentication Methods can allow a local attacker to gain elevated privileges. Recommendations At the...

PT-2025-42084

Name of the Vulnerable Software and Affected Versions Storport.sys affected versions not specified Description A buffer over-read issue exists in the Storport.sys driver. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no...

SUSE SLES12 Security Update : open-vm-tools (SUSE-SU-2025:03585-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03585-1 advisory. - CVE-2025-41244: fixed a local privilege escalation vulnerability bnc1250373. Tenable has extracted the preceding description block directly from the...

PT-2025-41944

Name of the Vulnerable Software and Affected Versions FortiSOAR versions 7.3.x FortiSOAR versions 7.4.x FortiSOAR versions 7.5.0 through 7.5.1 FortiSOAR versions 7.6.0 through 7.6.1 Description An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' issue CWE-7...

PT-2025-42064

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free condition exists in the Windows Bluetooth Service. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is n...

PT-2025-41954

Name of the Vulnerable Software and Affected Versions FortiClient versions 7.0 through 7.2.9 FortiClient versions 7.4.2 and below Description An issue exists in FortiClient for macOS where improper verification of cryptographic signatures may allow a local user to escalate privileges through...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to local elevation of privilege...

PT-2025-41869

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw that allows for a potential out-of-bounds write due to an incorrect bounds check. Successful exploitation of this issue could lead to local escalatio...

PT-2025-42140

Name of the Vulnerable Software and Affected Versions Windows Authentication Methods affected versions not specified Description An issue exists in Windows Authentication Methods where improper validation of input allows a local attacker to gain elevated privileges. Recommendations At the moment,...

PT-2025-42047

Name of the Vulnerable Software and Affected Versions Azure Local affected versions not specified Description A heap-based buffer overflow exists in Azure Local. An authorized attacker can exploit this to gain elevated privileges on a local system. Recommendations At the moment, there is no...

PT-2025-42030

Name of the Vulnerable Software and Affected Versions Windows versions prior to October 2025 Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Cloud Files Mini Filter Driver. This condition allows a locally authorized attacker to elevate privileges. The issue ste...

PT-2025-42024

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An out-of-bounds read issue exists in Windows NDIS. A local attacker with authorization can exploit this to elevate privileges. Recommendations At the moment, there is no information...

PT-2025-42020

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use after free condition exists in Windows NTFS. This allows an unauthorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newe...

PT-2025-42132

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows DWM Core Library. This issue could allow a locally authorized attacker to elevate privileges. Recommendations At the moment, there is no...

PT-2025-42146

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An issue exists in Azure Monitor Agent where deserialization of untrusted data can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there...

PT-2025-42085

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges locally...