4936 matches found
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...
EUVD-2025-34369
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
EUVD-2025-34266
Time-of-check time-of-use toctou race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally...
EUVD-2025-34357
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
EUVD-2025-34379
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2025-34370
Improper validation of specified type of input in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...
EUVD-2025-34274
Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...
EUVD-2025-34380
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2025-34390
Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally...
EUVD-2025-34395
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
EUVD-2025-34296
Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally...
EUVD-2025-34291
Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally...
EUVD-2025-34392
Improper access control in Network Connection Status Indicator NCSI allows an authorized attacker to elevate privileges locally...
EUVD-2025-34388
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2025-34294
Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...
EUVD-2025-34304
Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2025-34297
Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2025-34401
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...