1680 matches found
EUVD-2025-34415
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
CVE-2025-55677
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
CVE-2025-55677
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
CVE-2025-50174
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
CVE-2025-50174
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
CVE-2025-55677
CVE-2025-55677 affects the Windows Device Association Broker service and is caused by an untrusted pointer dereference that enables local elevation of privileges for an authenticated user. Microsoft corresponding fix is in KB5066835 (OS builds 26200.6899 and 26100.6899); applying these updates re...
CVE-2025-55677 Windows Device Association Broker Service Elevation of Privilege Vulnerability
...
CVE-2025-55677 Windows Device Association Broker Service Elevation of Privilege Vulnerability
...
CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability
...
CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability
...
CVE-2025-50174
CVE-2025-50174 is a use-after-free in the Windows Device Association Broker service that enables a local attacker to escalate privileges. Affected platforms include Windows OS versions addressed by KB5066835 (OS builds 26200.6899 and 26100.6899). Root cause: use-after-free in the broker service; ...
EUVD-2025-34429
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
PT-2025-42027
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows Device Association Broker service where an untrusted pointer dereference can occur. This allows an authorized attacker to gain elevated privileges on a local...
CLSA-2025-1760370936 Fix CVE(s): CVE-2021-3738
SECURITY UPDATE: improper handling of association groups can lead to use- after-free vulnerability - debian/patches/CVE-2021-3738.patch: Fix routines for preparing service before handling CVE-2021-3738 - debian/patches/CVE-2021-3738-1.patch: Fix DsBindAssocGroupAdmin to use admin credentials for...
Linux Distros Unpatched Vulnerability : CVE-2025-61783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail ev...
SUSE CVE-2025-61783
Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the associatebyemail pipeline was not included. This could lead to account compromise when a third-party authentication service doe...
DEBIAN-CVE-2025-61783
Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the associatebyemail pipeline was not included. This could lead to account compromise when a third-party authentication service doe...
CVE-2025-61783
Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the associatebyemail pipeline was not included. This could lead to account compromise when a third-party authentication service doe...