CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

The vulnerability of the Windows Update Stack component of the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Update Stack component of the Microsoft Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-21204

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-21204

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-21204

CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...

CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability

...

CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability

...

CVE-2025-27475

CVE-2025-27475 is a Windows Update Stack elevation-of-privilege vulnerability. Description: sensitive data stored in improperly locked memory within the Windows Update Stack can enable a locally authenticated attacker to escalate privileges. CVSS v3.1 metrics indicate LOCAL attack vector, HIGH im...

2025-04 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5055518)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2025-04 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5055518)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

April 8, 2025—KB5055526 (OS Build 20348.3453)

None None...

April 8, 2025—KB5055521 (OS Build 14393.7969)

None None...

Windows Update Stack Elevation of Privilege Vulnerability

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

April 8, 2025—KB5055528 (OS Builds 22621.5189 and 22631.5189)

None None...

April 8, 2025—KB5055523 (OS Build 26100.3775)

None None...

KB5055661: Servicing stack update for Windows 10, version 1607 and Server 2016: April 8, 2025

None None...

KLA82401 OSI vulnerability in Microsoft Apps

Information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29805 Related products Microsoft-Outlook CVE list CVE-2025-29805 critical Solution Install...

PT-2025-15596

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to April 2025 Patch Tuesday Description A use-after-free vulnerability exists in the Windows Common Log File System CLFS driver. Successful exploitation of this vulnerability allows an authorized attacker to...