The vulnerability of the Windows operating system’s COM+ Event System Service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows operating system’s COM+ Event System Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the ETL Channel component for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the ETL component of Windows operating systems is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the NTLM Hash component in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the NTLM Hash component in Windows operating systems is related to incorrect external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of the Windows operating system’s Search Service allows a perpetrator to trigger a service failure.

The vulnerability of the Windows operating system’s Search Service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-53950

An Exposure of Private Personal Information 'Privacy Violation' vulnerability CWE-359 in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

EUVD-2025-34296

Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally...

EUVD-2025-34343

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-59255

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-55695

CVE-2025-55695 describes an out-of-bounds read vulnerability in the Windows WLAN Auto Config Service that enables an authorized local attacker to disclose information. The description in the initial document confirms the root cause (out-of-bounds read) and the impact (local information disclosure...

CVE-2025-24052

CVE-2025-24052 concerns vulnerabilities in the Agere modem driver (ltmdm64.sys) shipped with Windows. The connected Microsoft KBs confirm that the ltmdm64.sys driver is removed in October 2025 updates, and that fax-modem hardware relying on this driver will no longer function on Windows after the...

Microsoft Data Sharing Service 竞争条件问题漏洞

Microsoft Data Sharing Service is a built-in data sharing service component of the Windows operating system from Microsoft Corporation USA. A competitive condition vulnerability exists in Microsoft Data Sharing Service, which can be exploited by an attacker to perform spoofing attacks...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. Microsoft Windows suffers from an input validation error vulnerability that originates from an attacker exploiting the vulnerability to cause a denial of service on the system...

PT-2025-41973

Name of the Vulnerable Software and Affected Versions Windows Agere Modem Driver ltmdm64.sys versions prior to the October 2025 cumulative update Description The Agere Modem Driver, a component used for dial-up or fax connections in Windows, contains a flaw related to the handling of untrusted...

PT-2025-41972

Name of the Vulnerable Software and Affected Versions Windows operating systems affected versions not specified Description A security issue exists that allows for privilege escalation, potentially impacting the system. This relates to the third-party Agere Modem driver, specifically the...

PT-2025-42115

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to KB5065813 Description An improper access control issue exists in the Windows Remote Access Connection Manager RasMan. This allows a local attacker to elevate privileges, potentially gaining SYSTEM-level...

PT-2025-42026

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description The Windows USB Video Driver exhibits a flaw where the generation of error messages can expose sensitive information locally to an authorized attacker. The issue allows for t...