4933 matches found
The vulnerability in the implementation of the Credential Security Support Provider (CredSSP) protocol of the Microsoft Windows operating system allows a perpetrator to enhance their privileges.
The vulnerability of the Credential Security Support Provider CredSSP protocol implementation in the Microsoft Windows operating system lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the MBT Transport Driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the MBT Transport Driver driver for Windows operating systems is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Apache HTTP Server 2.4.17 < 2.4.64 DoS Vulnerability - Windows
Apache HTTP Server is prone to a denial of service DoS vulnerability via HTTP/2. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-43394
A Server-Side Request Forgery SSRF flaw was found in Apache HTTP Server on Windows. This issue can allow NTLM hashes to be leaked to a malicious server via modrewrite or apache expressions that pass unvalidated request input. Mitigation Mitigation for this issue is either not available or the...
CVE-2025-49667
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2025-49724
Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...
CVE-2024-43394
Server-Side Request Forgery SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via modrewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server...
CVE-2025-46789 Zoom Clients for Windows - Classic Buffer Overflow
Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access...
CVE-2025-46334 Git GUI malicious command injection on Windows
Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable always includes...
CVE-2025-46334
Git GUI on Windows is affected by CVE-2025-46334. A malicious repository can ship a harmful sh.exe or textconv filter (e.g., astextplain) due to Tcl’s Windows search path including the current directory, causing these programs to run when a user selects Git Bash or Browse Files. This is a local v...
CVE-2025-46334 Git GUI malicious command injection on Windows
Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable always includes...
The vulnerability of the Secure Kernel Mode mode in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to modifications made to critical security-related code. Exploiting this vulnerability can allow an attacker to disclose protected information...
SUSE CVE-2025-46334
Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable always includes...
The vulnerability of the SPNEGO security mechanism for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the SPNEGO security mechanism for Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-49733
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2025-49661
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2025-48824
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-47975
Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...