2949 matches found
CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability
...
CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability
...
CVE-2025-27475
CVE-2025-27475 is a Windows Update Stack elevation-of-privilege vulnerability. Description: sensitive data stored in improperly locked memory within the Windows Update Stack can enable a locally authenticated attacker to escalate privileges. CVSS v3.1 metrics indicate LOCAL attack vector, HIGH im...
2025-04 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5055518)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2025-04 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5055518)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
April 8, 2025—KB5055526 (OS Build 20348.3453)
None None...
April 8, 2025—KB5055521 (OS Build 14393.7969)
None None...
April 8, 2025—KB5055528 (OS Builds 22621.5189 and 22631.5189)
None None...
Windows Update Stack Elevation of Privilege Vulnerability
Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...
April 8, 2025—KB5055523 (OS Build 26100.3775)
None None...
KB5055661: Servicing stack update for Windows 10, version 1607 and Server 2016: April 8, 2025
None None...
PT-2025-15596
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to April 2025 Patch Tuesday Description A use-after-free vulnerability exists in the Windows Common Log File System CLFS driver. Successful exploitation of this vulnerability allows an authorized attacker to...
KLA82401 OSI vulnerability in Microsoft Apps
Information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29805 Related products Microsoft-Outlook CVE list CVE-2025-29805 critical Solution Install...
Microsoft Windows Update Stack 安全漏洞
Microsoft Windows Update Stack is part of Microsoft Corporation USA for managing updates. A security vulnerability exists in Microsoft Windows Update Stack. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 11 Version 22H2...
KB5055665: Servicing stack update for Windows Server 2012 R2: April 8, 2025
None None...
PT-2025-15482
Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description The vulnerability is related to improper link resolution before file access in the Windows Update Stack, allowing an authorized attacker to elevate privileges locally. This issue...
Microsoft Windows Update Stack 后置链接漏洞
Microsoft Windows Update Stack is part of Microsoft Corporation USA for managing updates. A backlink vulnerability exists in Microsoft Windows Update Stack. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows Server...
March 27, 2025—KB5053656 (OS Build 26100.3624) Preview
None None...
