PT-2025-42064

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free condition exists in the Windows Bluetooth Service. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is n...

Microsoft Windows Improper Access Control Vulnerability

Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally...

PT-2025-42005

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An incorrect implementation of the authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally. An unauthenticated...

PT-2025-42057

Name of the Vulnerable Software and Affected Versions Connected Devices Platform Service Cdpsvc affected versions not specified Description A use after free condition exists in the Connected Devices Platform Service Cdpsvc. This allows an authorized attacker to gain elevated privileges on the loc...

PT-2025-42054

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An issue with improper input validation exists in Microsoft Windows Speech. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2025-42014

Name of the Vulnerable Software and Affected Versions Microsoft Windows Hyper-V affected versions not specified Description A race condition exists in Windows Hyper-V during concurrent execution using shared resources with improper synchronization. This allows a locally authorized attacker to...

PT-2025-42043

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue exists in the Windows Kernel. This condition allows a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could result in out-of-bounds writes and could lead to local elevation of privilege if a malicious attacker ha...

PT-2025-42081

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free condition exists in Microsoft Brokering File System, potentially allowing an attacker to gain elevated privileges on a local system. Recommendations A...

PT-2025-41995

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free condition exists in the Microsoft Brokering File System component. This allows an unauthorized attacker to elevate privileges locally. A use-after-fre...

PT-2025-42037

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A race condition exists due to improper synchronization when concurrent processes access shared resources within Windows Resilient File System ReFS. This allows an...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an incorrect boundary check that could lead to out-of-bounds writes, which in turn could trigger a local elevation of privilege...

SUSE: Security Advisory (SUSE-SU-2025:03585-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2025-34042

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

CVE-2025-9968

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

CVE-2025-9968

CVE-2025-9968 affects the Armoury Crate product family, specifically the UnifyScanner component. A link following vulnerability can be triggered by crafting a junction, potentially allowing local privilege escalation. Impact is described as high for confidentiality and integrity with local attack...

CVE-2025-9968

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

CVE-2025-9968

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. This vulnerability may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation. For more information, please refer to section 'Security Update for Armoury Crate...

SUSE-SU-2025:03585-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: - CVE-2025-41244: fixed a local privilege escalation vulnerability bnc1250373...

Ivanti Endpoint Manager 代码问题漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a deserialization...