4930 matches found
GHSA-F87W-3J5W-V58P CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. Chromium security severity: High https://nvd.nist.gov/vuln/detail/CVE-2025-2783...
The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-26681
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-29824
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-27730
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...
The vulnerability of the Windows Local Session Manager (LSM) component of the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the Windows Local Session Manager LSM component of the Windows operating system is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...
The vulnerability of the Local Security Authority (LSA) service in the Windows operating system allows a perpetrator to elevate their privileges.
The vulnerability of the Local Security Authority LSA service in the Windows operating system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Cortex XDR Agent: Local Windows User Can Crash the Agent
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it. Work...
PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware
Microsoft has revealed that a now-patched security flaw impacting the Windows Common Log File System CLFS was exploited as a zero-day in ransomware attacks aimed at a small number of targets. "The targets include organizations in the information technology IT and real estate sectors of the United...
Remote Desktop Client RCE Vulnerability (Apr 2025) - Windows
Remote Desktop Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Windows dxkrnl Untrusted Pointer Dereference Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the dxkrnl.sys...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-27732
Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-27485
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...
CVE-2025-26687
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-29808 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2025-27736 Windows Power Dependency Coordinator Information Disclosure Vulnerability
...
