Lenovo Dock Manager security vulnerability

Lenovo Dock Manager is a docking station firmware update software from Lenovo China. A security vulnerability exists in Lenovo Dock Manager that stems from improper default permissions that could result in log file redirection...

EulerOS 2.0 SP10 : aide (EulerOS-SA-2025-2377)

According to the versions of the aide package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An...

EUVD-2025-93490

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2025-62209

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-62208

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-60709

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-60709

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-93401

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-62209

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

EUVD-2025-93402

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-60709

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-93437

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-60709

Technical details (affected product/version, root cause, impact, exploit specifics) are not publicly provided in the given documents for CVE-2025-60709. Monitor for updates from Microsoft; no additional vulnerability specifics are available here.

CVE-2025-31645

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2025-12940

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...

CVE-2025-31645

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2025-31645

CVE-2025-31645 affects Intel System Event Log (SEL) Viewer Utility software across all versions in Ring 3. Root cause: an uncontrolled search path vulnerability that could be exploited by a local, unprivileged attacker with authenticated access and high attack complexity, potentially enabling pri...

CVE-2025-31645

Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...