CVE-2025-49685 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2025-49685 Windows Search Service Elevation of Privilege Vulnerability

...

The vulnerability of the Windows operating system’s Search service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows operating system’s Search service is related to improper code generation management. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-21292

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2025-21292

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2025-21292 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2025-21292

CVE-2025-21292 affects Windows Search Service (Windows Search Component) and is categorized as an elevation-of-privilege vulnerability with a CVSS v3.1 base score of 8.8 (HIGH). The connected sources identify the impact as obtaining increased privileges and confirm the vulnerability within Window...

Windows Search Service Elevation of Privilege Vulnerability

...

PT-2025-4201 · Microsoft · Windows Search Service +1

Name of the Vulnerable Software and Affected Versions: Windows Search Service affected versions not specified Description: An elevation-of-privilege issue affects the system, allowing attackers to elevate their privileges. Recommendations: At the moment, there is no information about a newer...

Malicious code in aws-cloud_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-4839

A Cross-Site Request Forgery CSRF vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service under construction, XTTS service, Petals service, vLLM service, and Motion Ctrl service,...

CVE-2024-4839 CSRF in Servers Configurations in parisneo/lollms-webui

A Cross-Site Request Forgery CSRF vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service under construction, XTTS service, Petals service, vLLM service, and Motion Ctrl service,...

CVE-2024-4839 CSRF in Servers Configurations in parisneo/lollms-webui

A Cross-Site Request Forgery CSRF vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service under construction, XTTS service, Petals service, vLLM service, and Motion Ctrl service,...

CVE-2024-4839

CVE-2024-4839 affects parisneo/lollms-webui, versions 9.6 through the latest. The vulnerability is a CSRF flaw in the 'Servers Configurations' function that guards several components (Elastic search Service, XTTS service, Petals service, vLLM service, Motion Ctrl service). The root cause is lack ...

LoLLMs Cross-Site Request Forgery Vulnerability

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A cross-site request forgery vulnerability exists in LoLLMs version 9.6 and prior versions, which stems from a lack of cross-site request forgery protection in the Elastic Search Service, XTTS...

The vulnerability of the Windows Search service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Search service in Windows operating systems is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-30033

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2024-30033

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2024-30033

CVE-2024-30033 affects the Microsoft Windows operating system from the Windows Search Component area. The vulnerability is described as an Elevation of Privilege in the Windows Search Service, enabling a local attacker to obtain higher privileges on the system. The CVE is categorized with a CVSS ...

CVE-2024-30033 Windows Search Service Elevation of Privilege Vulnerability

...