CVE-2025-10491

The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijacking. This issue affects MongoDB Server v6.0 version prior to 6.0.25, MongoDB Server v7.0 version prior to 7.0.21 a...

CVE-2025-57624

A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code via multiple DLLs...

PT-2025-38067

Name of the Vulnerable Software and Affected Versions: CYRISMA Agent versions prior to 444 Description: A DLL hijacking vulnerability allows local users to escalate privileges and execute arbitrary code via multiple DLLs. Recommendations: Update CYRISMA Agent to version 444 or later...

CVE-2025-57624

CVE-2025-57624 is a DLL hijacking vulnerability in CYRISMA Agent prior to version 444 that enables local privilege escalation and arbitrary code execution via multiple DLLs. The CVSS vector indicates a LOCAL attack with LOW attack complexity, requiring LOW privileges and no user interaction, with...

CVE-2025-10491

The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijacking. This issue affects MongoDB Server v6.0 version prior to 6.0.25, MongoDB Server v7.0 version prior to 7.0.21 a...

CVE-2025-10491

The CVE-2025-10491 issue concerns MongoDB Server on Windows where the MSI installer may leave ACLs unset on custom installation directories, enabling a local attacker to insert a malicious DLL and hijack the MongoDB process. Affected versions are MongoDB Server 6.0 prior to 6.0.25, 7.0 prior to 7...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server v6.0 versions prior to 6.0.25, v7.0 versions...

PT-2025-37717

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.21 MongoDB Server versions prior to 8.0.5 Description: The MongoDB Windows installation MSI may leave Access Control Lists ACLs unset on custom installation...

CVE-2025-9201

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...

CVE-2025-10213

DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\AppData\Local\Microsoft\WindowsApps' directory, which could lead to arbitrary...

CVE-2025-9201

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...

CVE-2025-9201

CVE-2025-9201 corresponds to a DLL hijacking vulnerability in Lenovo Browser that could allow a local user to execute code with elevated privileges. Connected sources explicitly reference Lenovo Browser and describe the issue as a local privilege escalation via DLL hijacking, but they do not prov...

CVE-2025-9201

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...

CVE-2025-9201

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges...

CVE-2025-9059

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059

CVE-2025-9059 affects the Altiris Core Agent Updater package (AeXNSC.exe). The vulnerability is an elevation of privileges caused by DLL hijacking, described in multiple sources as a local attack requiring low privileges and user interaction of NONE, with high impact overall (confidentiality, int...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

Broadcom Symantec IT Management Suite 安全漏洞

Broadcom Symantec IT Management Suite is a software from Broadcom Corporation USA that manages the configuration of repair applications and operating systems. A security vulnerability exists in Broadcom Symantec IT Management Suite that stems from vulnerability to DLL hijacking attacks that could...

PT-2025-37261

Name of the Vulnerable Software and Affected Versions: Lenovo Browser affected versions not specified Description: A potential DLL hijacking issue was identified in Lenovo Browser. This could allow a local user to execute code with elevated privileges. Recommendations: At the moment, there is no...