PT-2025-42003

Name of the Vulnerable Software and Affected Versions Windows versions prior to 2025 Description A flaw exists in Windows Virtualization-Based Security VBS Enclave where reliance on untrusted inputs during a security decision process can allow a local attacker to elevate privileges. The issue...

EUVD-2025-20600

Malicious code in bioql PyPI...

EUVD-2025-20594

Malicious code in bioql PyPI...

EUVD-2024-37170

Malicious code in bioql PyPI...

EUVD-2025-20658

Malicious code in bioql PyPI...

EUVD-2024-19015

Malicious code in bioql PyPI...

Virtualized (In)Security: How Attackers Can Weaponize VBS Enclaves

Read about Ori David’s presentation at DEF CON 33 and learn how attackers can abuse VBS enclaves, a Windows security feature, for malicious purposes...

CVE-2025-48811

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-47159

Protection mechanism failure in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-48803

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-48811

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-48811

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-48803

Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-47159

Protection mechanism failure in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2025-48811 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2025-48811

CVE-2025-48811 affects Windows Virtualization-Based Security (VBS) Enclave, with the root cause described as missing integrity check in the Enclave. The NCSC advisory lists this CVE as impacting Windows VBS Enclave and notes an ability to obtain increased privileges. The entry indicates that Micr...

CVE-2025-48803

CVE-2025-48803 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is a missing integrity check in the Enclave, enabling an authorized local attacker to obtain elevated privileges. The NCSC aggregation also lists CVE-2025-48803 with an impact of gaining elevated privileges...

CVE-2025-48803 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

CVE-2025-47159 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

CVE-2025-47159 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...