5260 matches found
CVE-2025-47991
Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-49685
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2025-48819
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
Microsoft Office 365 (2016 Click-to-Run) RCE Vulnerability (Jul 2025)
This host is missing a critical security update according to Microsoft Office Click-to-Run update July 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2025-49725
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49726
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49689
Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...
CVE-2025-49678
Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2025-49675
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-49659
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
CVE-2025-49660
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
CVE-2025-49659
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
CVE-2025-47996
Integer underflow wrap or wraparound in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally...
CVE-2025-47993
Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-21195
Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...
CVE-2025-49730
Technical details about CVE-2025-49730 are not publicly available in the provided connected documents. Monitor for updates from official advisories; no information on affected products, root cause, or fixes is provided here.
CVE-2025-49725
Technical details beyond the short CVE description are not provided in the supplied documents. No product/version/patch specifics, exploit details, or remediation steps are available. Monitor official Microsoft advisories for patched versions and remediation guidance.
CVE-2025-49693
Microsoft Brokering File System contains a double-free vulnerability (CVE-2025-49693) that could enable an authorized local attacker to elevate privileges. The CVE is documented with a 7.8 HIGH base score (local, low attack complexity) across multiple sources; no patch/version details are provide...
