96 matches found
PT-2025-24842 · Microsoft · Windows Local Security Authority +1
Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: A null pointer dereference issue in the Windows Local Security Authority LSA allows an authorized attacker to cause a denial of service over a network...
KLA84760 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...
Windows LAPS
Binary data wmiwindowslaps.nbin...
CVE-2025-5265
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.. Th...
CVE-2025-5265 Potential local code execution in “Copy as cURL” command
Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.. Th...
CVE-2025-35471 conda-forge openssl-feedstock writable OPENSSLDIR
conda-forge openssl-feedstock before 066e83c 2024-05-20, on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary co...
CVE-2025-30408
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39904, Acronis Cyber Protect 16 Windows before build 39938...
CVE-2025-26651
Exposed dangerous method or function in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
CVE-2025-21191
Time-of-check time-of-use toctou race condition in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2025-27478
Heap-based buffer overflow in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2025-27731
Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...
CVE-2025-27478
Heap-based buffer overflow in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2025-26651
Exposed dangerous method or function in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
CVE-2025-26651
Exposed dangerous method or function in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
CVE-2025-21191
Time-of-check time-of-use toctou race condition in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2025-26651 Windows Local Session Manager (LSM) Denial of Service Vulnerability
...
CVE-2025-26651
CVE-2025-26651 is a Windows Local Session Manager (LSM) denial-of-service vulnerability. An authorized attacker could trigger a network-based DoS by exploiting an exposed dangerous method/function in LSM. The issue is documented across multiple sources and is being addressed by Microsoft security...
CVE-2025-21191
CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...
CVE-2025-27478
CVE-2025-27478 is a heap-based buffer overflow in Windows Local Security Authority (LSA) that enables a locally authenticated attacker to elevate privileges. The CVE is rated CVSS v3.1 7.0 (HIGH) with Local access, high confidentiality/integrity/availability impact. Connected sources confirm the ...
