Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service - Execution of arbitrary code root/admin privileges - Accessing sensitive data - Obtaining elevated...

EUVD-2025-74043

ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim ...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from improper configuration file permissions and insufficient input validation, which could lead to elevated privileges...

Intel Killer 代码问题漏洞

Intel Killer is a wireless network card driver from Intel Corporation USA. A code issue vulnerability exists in Intel Killer versions prior to 4.0 40.25.509.1465, which stems from an uncontrolled search path that could lead to elevated privileges...

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability exists in Intel Neural Compressor versions prior to v3.4, which stems from improper neutralization and could lead to elevated...

PT-2025-46455

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free condition exists in Windows Smart Card. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no information...

Intel Processor Identification Utility 安全漏洞

Intel Processor Identification Utility is a processor identification utility from Intel Corporation USA. The program supports the display of graphics information, chipset information, processor supported technologies, and other information. A security vulnerability exists in Intel Processor...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from improper external control of filenames or paths, and no details of the vulnerability are...

Intel OFU 安全漏洞

Intel OFU is a flash update application from Intel Corporation USA. A security vulnerability exists in Intel OFU versions prior to 14.1.31, which stems from improperly set default permissions and could result in elevated privileges...

Intel QuickAssist Technology 输入验证错误漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. An input validation error vulnerability exists in Intel QuickAssist Technology versions pri...

Intel Slim Bootloader 安全漏洞

Intel Slim Bootloader is a lightweight secure boot solution from Intel Corporation USA designed for the Intel platform. A security vulnerability exists in Intel Slim Bootloader that stems from a failure of the UEFI firmware protection mechanism, which could lead to elevated privileges...

Intel Server Configuration Utility和Intel Server Firmware Update Utility 后置链接漏洞

Intel Server Configuration Utility and Intel Server Firmware Update Utility are both products of Intel Corporation Intel, U.S.A. Intel Server Configuration Utility is a command line utility. Intel Server Firmware Update Utility is a command line utility. A backlink vulnerability exists in Intel...

SAP S4CORE 安全漏洞

SAP S4CORE is a Managed Procurement Contracts application from SAP, Germany. A security vulnerability exists in SAP S4CORE that stems from a failure to perform required authorization checks on authenticated users, which could result in elevated privileges...

Intel Thread Director Visualizer 安全漏洞

Intel Thread Director Visualizer is a desktop application from Intel Corporation USA. It helps end-users visualize CPU utilization and the distribution between P-cores performance cores and E-cores energy-efficient cores for Alder Lake and above platforms. A security vulnerability exists in Intel...

PT-2025-46535

Name of the Vulnerable Software and Affected Versions Spectrum Power versions prior to 4.70 SP12 Update 2 Description The application is susceptible to the exposure of database credentials through a world-readable credential file. Successful exploitation allows an attacker to connect to the...

PT-2025-46465

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to gain elevated privileges on a local system...

PT-2025-46468

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue with access control in the Windows Client-Side Caching CSC Service can allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no...

PT-2025-46461

Name of the Vulnerable Software and Affected Versions Windows WLAN Service affected versions not specified Description An issue exists in the Windows WLAN Service where external control of a file name or path can be exploited by an authorized attacker to gain elevated privileges locally...

PT-2025-46474

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue exists in the Windows Routing and Remote Access Service RRAS where an untrusted pointer dereference can occur. This allows an authorized attack...

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...