Windows Admin Center Elevation of Privilege Vulnerability

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

PT-2025-50170

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Common Log File System Driver. This issue allows a locally authorized attacker to gain elevated privileges. The issue involves an...

PT-2025-50160

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description The issue involves multiple local privilege escalation flaws within Microsoft Windows. A heap-based buffer overflow exists in Windows Win32K - GRFX, potentially allowing an...

PT-2025-50162

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A buffer over-read exists in Windows Projected File System. A successful exploit could allow an authorized attacker to elevate privileges locally. This issue allows...

PT-2025-50167

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An issue exists in Windows Projected File System that could allow a locally authenticated attacker to gain elevated privileges. The issue is due to an integer overflow o...

PT-2025-50168

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description An out-of-bounds read issue exists in Windows Defender Firewall Service, potentially allowing an attacker to disclose information locally. The issue allows attackers...

PT-2025-50194

Name of the Vulnerable Software and Affected Versions Application Information Services affected versions not specified Description An out-of-bounds read issue exists in Application Information Services, potentially allowing a local attacker to gain elevated privileges. The issue allows attackers ...

PT-2025-50156

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows Cloud Files Mini Filter Driver. This issue allows a locally authenticated attacker to gain elevated privilege...

PT-2025-50152

Name of the Vulnerable Software and Affected Versions Windows Storage VSP Driver affected versions not specified Description A security issue exists in the Windows Storage VSP Driver that allows a local attacker to gain elevated privileges. The problem stems from a lack of proper authentication f...

PT-2025-50202

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists in Microsoft Office SharePoint related to improper neutralization of input during web page generation, leading to a cross-site scripting condition. This...

PT-2025-50193

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A flaw in input validation within Windows Installer can allow an attacker with local access to gain elevated privileges. This issue allows for privilege escalation on the affected...

PT-2025-50163

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A flaw exists in Windows DirectX that can allow a local attacker to cause a denial-of-service condition. This issue is due to a null pointer dereference. Attackers can leverage this t...

PT-2025-50197

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A flaw in Windows Shell related to concurrent execution using a shared resource with improper synchronization, specifically a race condition, can allow a locally authenticated attacker ...

Microsoft Windows Use After Free Vulnerability

Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally...

CVE-2025-64660

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...

CVE-2025-59509

Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally...

CVE-2025-60717

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...