CVE-2025-55247

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2025-53150

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-50175

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-53717

Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-53150

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-50174

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

CVE-2025-47989

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2025-50152

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-48004

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-50152

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-48004

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-25004

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2025-25004

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2025-55697 Azure Local Elevation of Privilege Vulnerability

...

EUVD-2025-34351

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

EUVD-2025-34429

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34430

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2024-48891

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR 7.6.0 through 7.6.1, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an attacker who has already obtained a non-login low privileged shell access via...

CVE-2024-48891

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR 7.6.0 through 7.6.1, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an attacker who has already obtained a non-login low privileged shell access via...

CVE-2025-46774

An Improper Verification of Cryptographic Signature vulnerability CWE-347 in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below, 7.0 all versions may allow a local user to escalate their privileges via FortiClient related executables...