PT-2025-1112 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the MapUrlToZone method in Windows operating systems, which is associated with incorrect path equivalence resolution. This can allow a remote attacker to disclose...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Web Threat Defense User Service. An attacker could exploit the vulnerability to obtain sensitive information. The following products a...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

PT-2025-1168 · Microsoft · Windows

The Windows Telephony Service is affected by a remote code execution issue, which can be exploited by attackers to execute arbitrary code and impact the system. This issue is critical and can have significant consequences if exploited. The vulnerable software is Windows, but no specific versions...

PT-2025-1219 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the MapUrlToZone component of the Windows operating system, which is associated with incorrect path equivalence resolution. This can allow a remote attacker to bypas...

PT-2025-1165 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security-feature bypass vulnerability that affects the system. It is associated with an out-of-bounds read in memory in the SPNEGO NEGOEX security mechanism of...

PT-2025-1166

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a remote code execution vulnerability in the SPNEGO Extended Negotiation NEGOEX security mechanism. It is associated with the use of memory after it has been freed,...

Microsoft Windows Virtualization-Based Security Enclave 输入验证错误漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment within the host application address space from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Virtualization-Base...

SAP GUI 安全漏洞

SAP GUI is an application from SAP, a German company. graphical user interface for SAP systems. A security vulnerability exists in SAP GUI for Windows that stems from storing user input on the client PC to improve usability, and an attacker is able to read this data...

CVE-2024-9950

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...

CVE-2024-55540

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

CVE-2024-9950

CVE-2024-9950 affects Forescout SecureConnector on Windows (version 11.3.07.0109 and earlier). The root cause is an insecure temporary directory that allows an unauthenticated user to modify compliance scripts, enabling local privilege escalation. The CVE is supported by published PoC/example exp...

CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...

CVE-2024-55543

The connected PT-2025-3130 entry provides concrete details for CVE-2024-55543: affected software is Acronis Cyber Protect 16 (Windows) with builds before 39169, vulnerable due to DLL hijacking that enables local privilege escalation. Remediation is to update to a version after build 39169; as a t...

CVE-2024-49385

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A code issue...

The vulnerability of the SAP GUI graphical user interface for Windows lies in the insufficient protection of operational data, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the SAP GUI graphical user interface for Windows relates to the display of a password used to access the SAP system. This vulnerability stems from insufficient protection of administrative data. Exploiting this vulnerability could allow an intruder to gain unauthorized access...

PT-2025-3277 · Acronis · Acronis Cyber Protect 16

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 Windows versions prior to build 39169 Description: The web installer integrity check used a weak hash algorithm. This issue affects the Acronis Cyber Protect 16 Windows product. Recommendations: For Acronis Cyber...

CVE-2024-4230

External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in information disclosure,...

CVE-2024-4229

The CVE-2024-4229 entry concerns Edgecross Basic Software for Windows (1.00 and later) with an Incorrect Default Permissions flaw. A local attacker can execute arbitrary code and cause information disclosure, tampering, deletion, or DoS if the product is installed in a folder accessible to non-ad...