5521 matches found
CVE-2025-0117 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and...
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and...
CVE-2025-24072
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2025-24072
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2025-24072 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
...
CVE-2025-24072
CVE-2025-24072 is a use-after-free vulnerability in Microsoft Local Security Authority Server (lsasrv) that can allow an authorized attacker to locally elevate privileges. The affected component is lsasrv; impact is elevated privileges (local). Connected sources (including NCSC/KB advisories) con...
CVE-2025-24072 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
...
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
Microsoft Local Security Authority Server 资源管理错误漏洞
Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit the vulnerability to elevate privileges. The following products and...
UBUNTU-CVE-2025-21837
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-27685
Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001...
CVE-2025-27685
Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001...
CVE-2025-27685
Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration File Contains CA & Private Key V-2022-001...
Vasion Print 安全漏洞
Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print that stems from a configuration file containing a CA and private key...
Linux Distros Unpatched Vulnerability : CVE-2022-40898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled inp...
Linux Distros Unpatched Vulnerability : CVE-2023-0465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid...
Linux Distros Unpatched Vulnerability : CVE-2014-0139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Na...
SUSE CVE-2025-21755
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...