EUVD-2025-24317

Malicious code in bioql PyPI...

fly-adjust-palette Utility DoS

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

fly-adjust-palette Utility DoS

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

fly-kompmgr DoS

The vulnerability of the fly-kompmgr utility for the fly-wm window manager is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

fly-adjust-palette Utility DoS

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

fly-adjust-palette Utility DoS

The vulnerability of the fly-adjust-palette utility in the window graphical manager fly-wm is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

fly-wm Buffer Overflow DoS

The vulnerability of the fly-wm window graphical manager is related to reading data beyond the allowable buffer limit. Exploiting this vulnerability can allow an attacker to cause a service failure...

fly-wm DoS

The vulnerability of the fly-wmfunc utility function in the fly-wm window manager is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows DWM Privilege Escalation

The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of unreliable pointers. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2025-53801

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-53801

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-53801 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-53801 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-53801

CVE-2025-53801 is a Windows DWM core library elevation-of-privilege vulnerability described as an untrusted pointer dereference that enables a locally authenticated attacker to achieve elevation of privileges . The CVE is associated with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vect...

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

PT-2025-36824

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An untrusted pointer dereference in Windows Desktop Window Manager DWM can allow a locally authenticated attacker to gain elevated privileges. This issue allows attackers to affect the...

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...