2998 matches found
CVE-2025-30400
CVE-2025-30400 is a Windows DWM Core Library use-after-free vulnerability that enables local privilege escalation. Affected: Windows DWM Core Library components; exploit could grant SYSTEM-level privileges. CVSS v3.1 indicates high risk (local, user interaction none, privileges required low, conf...
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Time-of-check time-of-use toctou race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally...
Universal Print Management Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Universal Print Management Service allows an authorized attacker to elevate privileges locally...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Windows SMB Information Disclosure Vulnerability
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network...
MS-EVEN RPC Remote Code Execution Vulnerability
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
VulnCheck KEV: CVE-2025-32706
Microsoft Windows Common Log File System CLFS Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally...
Security Update for Microsoft .NET Core (May 2025)
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacke...
UBUNTU-CVE-2025-26646
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator...
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft Windows Common Log File System CLFS Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...
Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...
PT-2025-20960 · Microsoft · Windows Smb +1
Name of the Vulnerable Software and Affected Versions: Windows SMB affected versions not specified Description: A buffer over-read issue in Windows SMB allows an authorized attacker to disclose information over a network. This issue enables attackers to obtain sensitive information and potentiall...
CVE-2025-29972
Server-Side Request Forgery SSRF in Azure allows an authorized attacker to perform spoofing over a network...
CVE-2025-29972
Server-side request forgery ssrf in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network...
CVE-2025-29803
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-25002
Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...
CVE-2025-29808
Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...