CVE-2025-54093

Time-of-check time-of-use toctou race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2025-54092

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-53804

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-53807

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-53800

No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2025-53801

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-53803

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-53802

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53803

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2025-49734

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2025-49692

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2025-47997

Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2025-47997

Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

Windows NTFS Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

Windows Graphics Component Elevation of Privilege Vulnerability

No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Xbox Gaming Services Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...