CVE-2025-55331

CVE-2025-55331: Use-after-free in Windows PrintWorkflowUserSvc that allows a locally authenticated user to escalate privileges. Connected advisories indicate Microsoft released October 2025 security updates (e.g., KB5066835 and related KBs) addressing Windows print/cryptography components; apply ...

CVE-2025-50152 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-25004 PowerShell Elevation of Privilege Vulnerability

...

CVE-2025-59290 Windows Bluetooth Service Elevation of Privilege Vulnerability

...

CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability

...

CVE-2025-59207 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-59202 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...

CVE-2025-58719 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-58722 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-58716

CVE-2025-58716 affects Microsoft Windows Speech and is caused by improper input validation, enabling an authorized attacker to perform local privilege escalation. The CVE is documented with a CVSS v3.1 base score of 8.8 (High) and LOCAL attack vector, requiring LOW privileges and no user interact...

CVE-2025-55701 Windows Authentication Elevation of Privilege Vulnerability

...

CVE-2025-55687

CVE-2025-55687 is a local privilege-escalation vulnerability in Windows Resilient File System (ReFS) caused by a race condition when concurrent access to a shared resource occurs with improper synchronization. The impact is local elevation of privileges. Public docs (NCSC advisory and EUVD summar...

CVE-2025-55685

CVE-2025-55685 is a use-after-free in Windows PrintWorkflowUserSvc that allows an authorized local attacker to elevate privileges. Affected software: Windows PrintWorkflowUserSvc component. Root cause: use-after-free in PrintWorkflowUserSvc (exact technical path not detailed in the provided docs)...

CVE-2025-55335

CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...

CVE-2025-24052 Windows Agere Modem Driver Elevation of Privilege Vulnerability

...

CVE-2025-24990

CVE-2025-24990 is a local privilege escalation in the Microsoft‑supplied Agere Modem Driver (ltmdm64.sys). The issue is described as an untrusted pointer dereference within the driver, enabling a local attacker to escalate privileges to administrator. Microsoft addressed it by removing the driver...

CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability

...

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...