CVE-2025-20065

Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

The vulnerability of the trusted execution environment allows for attacks on the Virtualization-Based Security (VBS) Enclave of Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the DirectX Graphics Kernel subsystem (Dxgkrnl.sys) in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the DirectX Graphics Kernel subsystem Dxgkrnl.sys in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the BitLocker component in Windows operating systems, which allows a hacker to circumvent existing security restrictions

The vulnerability of the BitLocker component in Windows operating systems is related to the improper implementation of the sequence of actions that are performed. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to the delegation of untrusted pointers. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems, which allows attackers to escalate their privileges.

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Xbox IStorageService component in Windows operating systems, which allows attackers to escalate their privileges.

The vulnerability of the Xbox IStorageService component for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the BitLocker component in Windows operating systems, which allows a hacker to circumvent existing security restrictions

The vulnerability of the BitLocker component in Windows operating systems is related to the improper implementation of the sequence of actions that are performed. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

EUVD-2025-93529

Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

CVE-2025-59515

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59515

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-93418

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2025-62452

Technical details about CVE-2025-62452 (heap-based buffer overflow in RRAS) are not publicly provided in the supplied documents. The connected KB/MS documents do not specify affected products/versions, exploit details, or mitigations. Monitor for updates.

CVE-2025-59507 Windows Speech Runtime Elevation of Privilege Vulnerability

...

CVE-2025-20065

Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

CVE-2025-20065

Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

EUVD-2025-74038

AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system. This vulnerability can only be exploited if the attacker has access to the local Windows machine and sufficient access rights...