CVE-2026-25187 Winlogon Elevation of Privilege Vulnerability

...

CVE-2026-25187

Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

Winlogon Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...

CVE-2026-25187: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...

PT-2026-24311

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw exists in the Winlogon login program of Windows operating systems related to incorrect handling of symbolic links during file access. Exploitation of this issue could allow an...

Microsoft Winlogon post-installation link vulnerability

Microsoft Winlogon is a component built into the Windows NT series operating system developed by Microsoft. There is a post-release vulnerability in Microsoft Winlogon. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are affected: Windows ...

Windows Registry Persistence Via Userinit

This Metasploit module will install a payload that is executed during user logon. It writes a payload executable to disk and modifies the Userinit registry value in "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" to append the payload path, causing it to execute when any user logs in...

CVE-1999-0593

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in...

EUVD-1999-0576

Malware in sbrugna...

EUVD-2019-9833

Malware in sbrugna...

EUVD-2006-3439

Malware in sbrugna...

EUVD-2024-28004

Malicious code in bioql PyPI...

EUVD-2024-28003

Malicious code in bioql PyPI...

EUVD-2024-40337

Malicious code in bioql PyPI...

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

CVE-2018-5354

The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended server before opening a browser window. An unauthenticated...

Winlogon Privilege Escalation

The vulnerability of the Winlogon entry program in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...

Patch Tuesday - October 2024

Microsoft is addressing 118 vulnerabilities this October 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for five of the vulnerabilities published today, although it does not rate any of these as critical yet. Of those five, Microsoft lists two as...