CVE-2025-21204

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

Windows Update Stack Privilege Escalation

The vulnerability of the Windows Update Stack component of the Microsoft Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-21204

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-21204

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-21204

CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...

CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability

...

CVE-2025-27475

CVE-2025-27475 is a Windows Update Stack elevation-of-privilege vulnerability. Description: sensitive data stored in improperly locked memory within the Windows Update Stack can enable a locally authenticated attacker to escalate privileges. CVSS v3.1 metrics indicate LOCAL attack vector, HIGH im...

CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability

...

2025-04 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5055518)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2025-04 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5055518)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

April 8, 2025—KB5055526 (OS Build 20348.3453)

None None...

April 8, 2025—KB5055523 (OS Build 26100.3775) for Windows

None None...

April 8, 2025—KB5055521 (OS Build 14393.7969)

None None...

April 8, 2025—KB5055528 (OS Builds 22621.5189 and 22631.5189)

None None...

Windows Update Stack Elevation of Privilege Vulnerability

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

PT-2025-15534

Name of the Vulnerable Software and Affected Versions: Windows Update Stack affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

Microsoft Windows Update Stack 安全漏洞

Microsoft Windows Update Stack is part of Microsoft Corporation USA for managing updates. A security vulnerability exists in Microsoft Windows Update Stack. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 11 Version 22H2...