Windows NTLM Elevation of Privilege Vulnerability

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...

PT-2025-32822 · Microsoft · Windows Lsa +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: A null pointer dereference exists in the Windows Local Security Authority Subsystem Service LSASS. This issue allows an authorized attacker ...

Microsoft Kernel Streaming WOW Thunk Service Driver 安全漏洞

Microsoft Kernel Streaming WOW Thunk Service Driver is a kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Kernel Streaming WOW Thunk Service Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and edition...

PT-2025-32854

Name of the Vulnerable Software and Affected Versions: Windows NTLM affected versions not specified Description: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about a newer versio...

Microsoft Windows Local Security Authority Subsystem Service 代码问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone o...

Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker could exploit the vulnerability to elevate...

Intel PROSet/Wireless WiFi Software 代码问题漏洞

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A code issue vulnerability exists in Intel PROSet/Wireless WiFi Software for Windows versions prior to 23.110.0.5, which stems from an improperly checked condition that could lead to a denial of...

Microsoft Message Queuing 安全漏洞

Microsoft Message Queuing is a Microsoft solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker exploiting this vulnerability could execute code. The following products and editions...

Linux Distros Unpatched Vulnerability : CVE-2022-49976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS The...

[SECURITY] Fedora 41 Update: mingw-opencv-4.10.0-6.fc41

MinGW Windows OpenCV library...

CVE-2024-52894

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-40680

Lack of sensitive data encryption in CapillaryScope v2.5.0 of Capillary io, which stores both the proxy credentials and the JWT session token in plain text within different registry keys on the Windows operating system. Any authenticated local user with read access to the registry can extract the...

CVE-2025-40680 Encryption of sensitive data in CapillaryScope missing

Lack of sensitive data encryption in CapillaryScope v2.5.0 of Capillary io, which stores both the proxy credentials and the JWT session token in plain text within different registry keys on the Windows operating system. Any authenticated local user with read access to the registry can extract the...

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to the use of insecure mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to access control errors, which allow attackers to escalate their privileges.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the BitLocker data protection function in Microsoft Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the BitLocker data protection function in Microsoft Windows operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the Simple Search and Discovery Protocol (SSDP) service in Microsoft Windows operating systems allows a perpetrator to increase their privileges or cause a service failure.

The vulnerability of the Simple Search and Discovery Protocol SSDP service in Microsoft Windows operating systems is related to data type mixing errors. Exploiting this vulnerability can allow attackers to increase their privileges or cause service failures...

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...