2025-05 .NET 8.0.16 Security Update for x64 Server (KB5059200)

2025-05 .NET 8.0.16 Security Update for x64 Server KB5059200...

2025-05 .NET 9.0.5 Security Update for x64 Server (KB5059201)

2025-05 .NET 9.0.5 Security Update for x64 Server KB5059201...

2025-05 .NET 9.0.5 Security Update for x64 Client (KB5059201)

2025-05 .NET 9.0.5 Security Update for x64 Client KB5059201...

CVE-2024-9524

CVE-2024-9524 is a local privilege escalation affecting Avira Prime System Speedup Service on Windows 10 x64 (Avira Prime 1.1.96.2). The flaw arises from mishandling symbolic links and a TOCTTOU race, allowing a low-privileged attacker to create a symbolic link and escalate to SYSTEM to execute a...

CVE-2024-13759 Local Privilege Escalation in Avira Prime 1.1.96.2 on Windows 10 x64

Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletion...

CVE-2024-13962: Improper Link Resolution Before File Access

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveragi...

CVE-2024-13759: Improper Link Resolution Before File Access

Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletion...

CVE-2024-13944: Time-of-check Time-of-use (TOCTOU) Race Condition

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and...

VirtualBox 7.0.16 - Privilege Escalation

Exploit Title: VirtualBox 7.0.16 - Privilege Escalation Date: 2025-05-06 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Tested on: Win x64 CVE : CVE-2024-21111 include include include include include include include inclu...

CVE-2021-23841 affecting package shim-unsigned-x64 for versions less than 15.8-5

CVE-2021-23841 affecting package shim-unsigned-x64 for versions less than 15.8-5. A patched version of the package is available...

2025-04 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5055518)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2025-04 .NET 8.0.15 Security Update for x64 Server (KB5056686)

2025-04 .NET 8.0.15 Security Update for x64 Server KB5056686...

2025-04 .NET 8.0.15 Security Update for x64 Client (KB5056686)

2025-04 .NET 8.0.15 Security Update for x64 Client KB5056686...

2025-04 .NET 9.0.4 Security Update for x64 Server (KB5056687)

2025-04 .NET 9.0.4 Security Update for x64 Server KB5056687...

Microsoft Local Security Authority Server 安全漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 11 Version 22...

Microsoft Windows Bluetooth Service 安全漏洞

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows Server 2022...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are affected:Windows Server...

Improper Authentication

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Improper Authentication in the RefreshSignInAsyn...

2025-03 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5053603)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...