2998 matches found
Visual Studio Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an authorized attacker to execute code over a network...
Windows SDK Elevation of Privilege Vulnerability
Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally...
Windows Storage Management Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
PT-2025-24846 · Microsoft · Windows Storage Management Provider +1
Name of the Vulnerable Software and Affected Versions: Windows Storage Management Provider affected versions not specified Description: The issue is an out-of-bounds read that allows an authorized attacker to disclose information locally. Recommendations: At the moment, there is no information...
PT-2025-24831 · Microsoft · Windows Smb +1
Name of the Vulnerable Software and Affected Versions: Windows SMB affected versions not specified Description: The issue is related to an integer overflow or wraparound in Windows SMB, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no...
PT-2025-24839 · Microsoft · Windows Dwm Core Library +1
Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Windows DWM Core Library, which allows an authorized attacker to disclose information locally...
PT-2025-36880
Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: A stack-based buffer overflow exists in Windows NTFS that could allow a local attacker to execute code. The vulnerability may also allow remote attackers to execute arbitrary code and...
CVE-2024-42323
SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat incubating. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat incubating: before 1.6.0. Users are recommended to upgrade to version 1.6.0, which fixes the issue...
CVE-2023-49587
SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network...
CVE-2024-54780
Netgate pfSense CE prior to 2.8.0 beta release and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management interface. An authenticated attacker can exploit this vulnerability by injecting...
CVE-2025-29829
Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...
CVE-2025-29837
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...
CVE-2025-29956
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network...
CVE-2025-26684
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2025-30385
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-29973
Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...
CVE-2025-29969
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
CVE-2025-32709
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...