CVE-2025-21370

CVE-2025-21370 is a Windows VBS Enclave Elevation of Privilege vulnerability. Public sources describe an input-validation error in the VBS Enclave that can allow privilege escalation on Windows 11 variants (22H2/23H2/24H2). Exploitation is reported publicly, and Microsoft has released updates (e....

Microsoft Hyper-V 资源管理错误漏洞

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V NT Kernel Integration VSP, which can be exploited by an attacker to gain elevated privileges on a system...

WmsRepair Service Elevation of Privilege Vulnerability

...

Security Updates for Microsoft SharePoint Server 2019 (December 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid212234;...

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Framework component of Google Android. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

CVE-2024-43636

CVE-2024-43636 is a Win32k local elevation-of-privilege vulnerability with a CVSSv3.1 base score 7.8 (LOCAL, LOW PRIVILEGES, NO USER INTERACTION; impacts HIGH across confidentiality, integrity, and availability). CONNECTED documents confirm Windows OS components (Win32k) are affected and that Mic...

CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability

...

CVE-2024-43530

CVE-2024-43530 is a Windows Update Stack Elevation of Privilege vulnerability. The connected documents confirm this vulnerability affects Windows Update Stack and is associated with an elevated-privilege impact (CVE ID listed with “Obtaining elevated privileges/privilege escalation”) and a local-...

CVE-2024-49558

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

Ivanti Secure Access Client 安全漏洞

Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. to enable remote secure access, supporting enterprise-class VPN connections and encrypted access to resources. An elevation of privilege vulnerability exists in Ivanti Secure Access Client, which stems from the...

CVE-2024-38124 Windows Netlogon Elevation of Privilege Vulnerability

...

CVE-2024-38250

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2024-38184

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-38164 GroupMe Elevation of Privilege Vulnerability

...

Google Android elevation of privilege vulnerability (CNVD-2024-37975)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by obfuscated deputies in multiple locations. An attacker can exploit this vulnerability to escalate privileges...

CVE-2024-38052 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-30093 Windows Storage Elevation of Privilege Vulnerability

...

Dell OpenManage Server Administrator Local Lift Vulnerability

Dell OpenManage Server Administrator is a server management tool for server monitoring and configuration. Dell OpenManage Server Administrator suffers from a local elevation vulnerability caused by XSL Hijacking, which can be exploited by a low-privileged attacker to elevate to administrator...