CVE-2025-49761

CVE-2025-49761 is a Windows Kernel local privilege escalation (Use-after-free) vulnerability. The connected data confirms an effect: “Obtaining elevated privileges” with CVSS v3.1 base metrics indicating LOCAL, low attack complexity and privileges required, high impact to confidentiality/integrit...

NT OS Kernel Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally...

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Microsoft Windows Kernel 资源管理错误漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are...

KLA86584 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service. Below is a complete list of vulnerabilitie...

Microsoft Windows Kernel 资源管理错误漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are...

PT-2025-32816 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: A use after free issue exists in the Windows Kernel, potentially allowing a locally authorized attacker to elevate privileges. Recommendations: At the moment, there is no information...

PT-2025-32804

Name of the Vulnerable Software and Affected Versions Windows NT OS Kernel versions affected versions not specified Windows 11 versions affected versions not specified Description The issue involves the exposure of sensitive information within the Windows NT OS Kernel. This allows an authorized...

KB5063906: Windows Server 2012 Security Update (August 2025)

The remote Windows host is missing security update 5063906. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. CVE-2025-53766 - Concurrent execution using shared resource with improper...

PT-2025-32791

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description The issue relates to a type confusion in the Win32k.sys component of the Windows operating system. This type confusion occurs during resource access through incompatible...

PT-2025-32774 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: A use after free issue exists in the Windows Kernel, potentially allowing a locally authorized attacker to elevate privileges. Recommendations: At the moment, there is no information...

PT-2025-32145

Name of the Vulnerable Software and Affected Versions ThrottleStop.sys version 3.0.0.0 ThrottleStop.sys affected versions not specified Description The ThrottleStop.sys driver exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory through the MmMapIoSpace...

The vulnerability of the Win32 Kernel Subsystem in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32 Kernel Subsystem in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the kernel of Microsoft Windows, which allows a perpetrator to disclose protected information

The vulnerability of Microsoft Windows operating systems relates to the removal or modification of critical security code. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2025-48809

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-48808

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-49666

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network...