4922 matches found
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally...
Office Developer Platform Security Feature Bypass Vulnerability
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...
Windows Kerberos Denial of Service Vulnerability
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network...
Universal Print Management Service Elevation of Privilege Vulnerability
Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally...
Windows Event Tracing Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
Windows Hyper-V Information Disclosure Vulnerability
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network...
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
Windows Storage Spoofing Vulnerability
External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...
Windows Kernel Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...
PT-2025-28562 · Microsoft · Windows User-Mode Driver Framework Host +1
Name of the Vulnerable Software and Affected Versions: Windows User-Mode Driver Framework Host affected versions not specified Description: The issue allows an authorized attacker to disclose sensitive information locally due to the exposure of sensitive information to an unauthorized actor in...
PT-2025-28520 · Unknown +1 · Universal Print Management Service +1
Name of the Vulnerable Software and Affected Versions: Universal Print Management Service affected versions not specified Description: The issue concerns a use after free condition in the Universal Print Management Service, allowing an authorized attacker to elevate privileges locally. This means...
CVE-2025-49664: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally...
CVE-2025-49760: External Control of File Name or Path
External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...
PT-2025-28607 · Microsoft · Sql Server
Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The issue is related to a heap-based buffer overflow in SQL Server, which allows an authorized attacker to execute code over a network. This can be achieved through a network connection,...
PT-2025-28552 · Microsoft · Windows Universal Plug/Play (Upnp) Device Host +1
Name of the Vulnerable Software and Affected Versions: Windows Universal Plug and Play UPnP Device Host affected versions not specified Description: The issue is related to a use after free condition in the Windows Universal Plug and Play UPnP Device Host, which allows an authorized attacker to...
CVE-2025-48806: Use After Free
Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally...
CVE-2025-49731: Improper Handling of Insufficient Permissions or Privileges
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...