3994 matches found
Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
PT-2025-38494
Name of the Vulnerable Software and Affected Versions Windows Bluetooth Service affected versions not specified Description A race condition exists within the Windows Bluetooth Service due to concurrent execution using a shared resource with improper synchronization. This allows an authorized...
CVE-2025-55226
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to execute code locally...
CVE-2025-54098
Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-54911
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2025-54101
Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network...
CVE-2025-54916
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2025-54912
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2025-54895
Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally...
CVE-2025-55236
Time-of-check time-of-use toctou race condition in Graphics Kernel allows an authorized attacker to execute code locally...
CVE-2025-55223
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2025-55245
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
CVE-2025-54918
Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...
CVE-2025-54115
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-54114
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to deny service locally...
CVE-2025-53803
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2025-53802
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2025-58454
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.10 and prior inthe endpoint /WeGIA/html/memorando/listardespachos.php, in the idmemorando parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL...
