Windows StateRepository API Server file Tampering Vulnerability

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...

PT-2025-28612 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue concerns missing authorization in the Windows StateRepository API, allowing an authorized attacker to perform local tampering. This means that an attacker with certain privileges...

The vulnerability of the StateRepository service in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the StateRepository service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-21863

Windows StateRepository API Server file Elevation of Privilege Vulnerability...

CVE-2022-21863

Windows StateRepository API Server file Elevation of Privilege Vulnerability...

CVE-2022-21863

Windows StateRepository API Server file Elevation of Privilege Vulnerability...

Privilege escalation

Windows StateRepository API Server file Elevation of Privilege Vulnerability...

CVE-2022-21863 Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

CVE-2022-21863 Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

CVE-2022-21863

CVE-2022-21863 is a Windows elevation-of-privilege vulnerability in the StateRepository API Server. The NVD entry confirms the issue and indicates a local attacker could obtain elevated privileges. Related OpenVAS entries show affected Windows platforms and list KB updates (KB5009543/KB5009545 an...

Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

PT-2022-1503 · Microsoft · Windows Staterepository Api Server +1

Name of the Vulnerable Software and Affected Versions: Windows StateRepository API Server affected versions not specified Description: The issue is related to insecure privilege management in the Windows StateRepository API Server, which is part of the Windows operating system. This allows an...