33 matches found
CVE-2026-49170
CVE-2026-49170 affects the Windows StateRepository API server file due to insufficient granularity in access control, enabling an authorized local attacker to elevate privileges. Base metrics show CVSS v3.1: 7.8 (HIGH) with local access, low attack complexity, low privileges required, and no user...
CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability
...
CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability
...
Windows StateRepository API Server file Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
PT-2026-58145
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows StateRepository API allows an authorized attacker to elevate privileges locally. Recommendations Apply the July patch to resolve this...
CVE-2025-59203
Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...
EUVD-2025-34294
Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...
PT-2025-42095
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows StateRepository API where sensitive information is inserted into log files. This allows an authorized attacker to disclose information locally. Recommendations ...
EUVD-2025-20623
Malicious code in bioql PyPI...
EUVD-2022-27019
Malicious code in bioql PyPI...
CVE-2025-53789
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-53789 Windows StateRepository API Server file Elevation of Privilege Vulnerability
...
Microsoft Windows 访问控制错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An access control error vulnerability exists in the Microsoft Windows StateRepository API. An attacker could exploit the vulnerability to elevate privileges. The following products and editio...
PT-2025-32859 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: Missing authentication for a critical function within the Windows StateRepository API can allow a local attacker to elevate privileges. Recommendations: At the moment, there is no informati...
The vulnerability of the StateRepository service in the Windows operating system allows a perpetrator to gain access to read and modify data.
The vulnerability of the StateRepository service in the Windows operating system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to gain access to read and modify data...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...