CVE-2025-25041

CVE-2025-25041 affects the HPE Aruba Networking VIA Client on Windows, allowing malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM and potentially cause a DoS on Windows; Linux/Android are not affected. Connected sources note a related advisory (hpesbnw04841) and that the VIA cli...

HPESBNW04841 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Virtual Intranet Access (VIA) Client

Potential Security Impact: Local: Unauthorized Access to Files; Remote: Unauthenticated Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Intranet Access VIA See vulnerability summary for affected version Affected Products These vulnerabilities...

CVE-2025-2781 WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory

The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system. This issue affects Mobile VPN with SSL Client...

CVE-2025-2781

CVE-2025-2781 affects WatchGuard Mobile VPN with SSL Client for Windows (versions 11.0–12.11). The root cause is improper directory-permission configuration when installed in a non-default directory, enabling an authenticated local attacker to escalate to SYSTEM privileges. The CVSS v4 base metri...

Microsoft Remote Desktop Client 安全漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft USA. A security vulnerability exists in Microsoft Remote Desktop Client. An attacker could exploit the vulnerability to remotely execute code. The following products and editions are affected: Windows Server 2008 R2 for...

PT-2025-6786 · Bestinformed +1 · Bestinformed Infoclient +1

Name of the Vulnerable Software and Affected Versions: bestinformed Infoclient affected versions not specified Description: A low-privileged user can change the server address of the bestinformed Server to which the bestinformed Infoclient connects, allowing them to escalate their privileges by...

SonicWall NetExtender Windows client elevation of privilege vulnerability (CNVD-2025-12370)

SonicWall NetExtender Windows client is a software application from SonicWALL USA that allows remote users to connect to remote networks in a secure manner. Provides simple and secure access for Windows and Linux users. An elevation of privilege vulnerability exists in the SonicWall NetExtender...

CVE-2019-3636

A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...

CVE-2025-23007

SonicWall NetExtender Windows client is affected by a local privilege escalation vulnerability in the log export function. The issue allows unauthorized access to sensitive Windows system files, with the NetExtender versions up to 10.3.0 identified as affected. Root cause and specific vulnerable ...

CVE-2025-23007

A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentially leading to privilege escalation...

SonicWALL NetExtender 安全漏洞

SonicWall NetExtender Windows client is a software application from SonicWALL USA that allows remote users to connect to remote networks in a secure manner. Provides simple and secure access for Windows and Linux users. An elevation of privilege vulnerability exists in the SonicWall NetExtender...

Amazon Workspaces Client Installed (Windows)

Binary data amazonworkspacesclientwininstalled.nbin...

Amazon DCV Client Installed (Windows)

Binary data amazondcvclientwininstalled.nbin...

Microsoft Windows PrintWorkflowUserSvc 输入验证错误漏洞

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. An input validation error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc. An attacker could exploit the vulnerability to elevate...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Client-Side Caching CSC Service. An attacker can exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Smart Card. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions...

Microsoft Message Queuing 资源管理错误漏洞

Microsoft Message Queuing is used to implement solutions for asynchronous and synchronous scenarios that require high performance. A resource management error vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The followin...

Microsoft Windows Task Scheduler 安全漏洞

Microsoft Windows Task Scheduler is an automation tool from Microsoft Corporation USA that allows users to automate scheduled tasks when specific conditions are met. A security vulnerability exists in Microsoft Windows Task Scheduler. An attacker could exploit the vulnerability to elevate...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. An input validation error vulnerability exists in Microsoft Lightweight Directory Access Protocol. An attacker exploiting this...

Microsoft Windows PrintWorkflowUserSvc 安全漏洞

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. A security vulnerability exists in Microsoft Windows PrintWorkflowUserSvc. An attacker could exploit the vulnerability to elevate privileges. The...