CVE-2025-24046 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2025-24046

Technical details enabling exploitation of CVE-2025-24046 (Kernel Streaming Service Driver elevation) are not publicly provided in the connected documents. The initial entry states a use-after-free leading to local privilege elevation; no confirmed exploit vectors or patches are described here. M...

CVE-2025-24995 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2025-24995

CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...

CVE-2025-24995 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

WordPress S3Bubble Media Streaming plugin <= 8.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin S3Bubble Media Streaming versions = 8.0...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2024-13862

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13862 S3Bubble Media Streaming <= 8.0 - Reflected XSS

The S3Bubble Media Streaming AWS|Elementor|YouTube|Vimeo Functionality WordPress plugin through 8.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Microsoft Streaming Service 资源管理错误漏洞

Microsoft Streaming Service is a video platform from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Streaming Service. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version...

PT-2025-10801 · Microsoft · Streaming Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft Streaming Service affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Streaming Service, allowing an authorized attacker to elevate privileges locally. Recommendations: At...

PT-2025-10814 · Microsoft · Streaming Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft Streaming Service affected versions not specified Description: A heap-based buffer overflow issue in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

PT-2025-10838 · Microsoft · Kernel Streaming Wow Thunk Service Driver +1

Name of the Vulnerable Software and Affected Versions: Kernel Streaming WOW Thunk Service Driver affected versions not specified Description: A heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Recommendations:...

WordPress plugin S3Bubble Media Streaming 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

Microsoft Streaming Service 安全漏洞

Microsoft Streaming Service is a video platform from Microsoft Corporation USA. A security vulnerability exists in Microsoft Streaming Service. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56694)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56694 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict...

SUSE CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...