PT-2025-46477

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A flaw exists in Windows DirectX that can allow an attacker to gain higher-level access to a system. This issue involves a use-after-free condition, potentially enabling local privile...

PT-2025-46465

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to gain elevated privileges on a local system...

PT-2025-46469

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description An out-of-bounds read issue exists in Windows Hyper-V. A local attacker with authorization can potentially disclose information. Recommendations At the moment, there is no information...

PT-2025-46458

Name of the Vulnerable Software and Affected Versions Windows Speech affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization in Windows Speech. This allows an authorized attacker to elevate privileges...

PT-2025-46467

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A missing cryptographic step in Windows Kerberos can allow an unauthorized attacker to elevate privileges on a network. The issue enables attackers to impersonate users and escalate privilege...

PT-2025-46487

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel. This can allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

PT-2025-46475

Name of the Vulnerable Software and Affected Versions Windows OLE affected versions not specified Description A heap-based buffer overflow exists in Windows OLE. This flaw could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...

PT-2025-46484

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to cause a denial of...

PT-2025-46559

Name of the Vulnerable Software and Affected Versions sudo affected versions not specified Description The rust rewrite of sudo contains a new issue allowing authentication bypass. This does not affect users utilizing nanos unikernels. Recommendations At the moment, there is no information about ...

PT-2025-46509

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office. Exploitation of this issue could allow an unauthorized attacker to execute code locally. The issue involves the use of memory...

PT-2025-46514

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description The Visual Studio Code CoPilot Chat Extension contains a flaw related to improper neutralization of special elements used in commands, potentially leading to...

PT-2025-46486

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel, potentially allowing an attacker to disclose information locally. Recommendations At the moment, there is no...

PT-2025-46229

Name of the Vulnerable Software and Affected Versions SAP GUI for Windows affected versions not specified Description A highly privileged user on an affected client PC may be able to locally access sensitive information stored in process memory during runtime. This issue has a high impact on...

PT-2025-46453

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description The software contains an SQL injection issue due to improper neutralization of special elements used in SQL commands. This allows an authorized attacker to elevate privileges over a networ...

PT-2025-46494

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. This issue could enable remote attackers to execute...

PT-2025-46461

Name of the Vulnerable Software and Affected Versions Windows WLAN Service affected versions not specified Description An issue exists in the Windows WLAN Service where external control of a file name or path can be exploited by an authorized attacker to gain elevated privileges locally...

PT-2025-46470

Name of the Vulnerable Software and Affected Versions Multimedia Class Scheduler Service MMCSS affected versions not specified Description A use after free condition exists in the Multimedia Class Scheduler Service MMCSS. This allows a locally authorized attacker to elevate privileges...

PT-2025-46512

Name of the Vulnerable Software and Affected Versions Microsoft Wireless Provisioning System affected versions not specified Description A double free condition exists in the Microsoft Wireless Provisioning System. This allows an authorized attacker to gain elevated privileges on a local system...

PT-2025-46500

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word. This can allow an unauthorized attacker to execute code locally. The issue involves improper memory management,...

PT-2025-46327

Name of the Vulnerable Software and Affected Versions Synology BeeStation OS versions prior to 1.3.2-65648 Description The Synology BeeStation OS contains a stack-based buffer overflow issue that allows for remote code execution. The flaw resides in the auth info component and can be exploited to...