CVE-2025-27237

CVE-2025-27237 通过 OpenSSL 配置文件劫持实现 Zabbix Agent/Agent2 for Windows 的本地权限提升漏洞。 概述 字段| 值 ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 高 CWE| CWE-427: 不受控制的搜索路径元素 类型| 本地权限提升 供应商| Zabbix Zabbix Agent for Windows 从硬编码路径 C:\vcpkg... 加载 OpenSSL 配置，该路径可被低权限用户写入。攻击者可以放置恶意的 openssl.cnf，在 Zabbix Agent...

PT-2026-73289

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...