Lucene search
+L

37429 matches found

NVD
NVD
added 2025/12/11 6:16 p.m.14 views

CVE-2025-64669

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00462EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/11 6:06 p.m.79 views

CVE-2025-64669

CVE-2025-64669 is an elevation-of-privilege in Windows Admin Center caused by improper access control. Connected sources describe exploitable paths via insecure directory permissions and TOCTOU/DLL-hijacking vectors, with two main exploit routes affecting Windows Admin Center components and updat...

7.8CVSS6.5AI score0.00462EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/11 6:06 p.m.60 views

CVE-2025-64669 Windows Admin Center Elevation of Privilege Vulnerability

...

7.8CVSS0.00462EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/11 6:06 p.m.4 views

CVE-2025-64669 Windows Admin Center Elevation of Privilege Vulnerability

...

7.8CVSS6.5AI score0.00462EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/11 12:58 a.m.8 views

EUVD-2025-202594

Form.io is a combined Form and API platform for Serverless applications. Versions 3.5.6 and below and 4.0.0-rc.1 through 4.4.2 contain a flaw in path handling which could allow an attacker to access protected API endpoints by sending a crafted request path. An unauthenticated or unauthorized...

8.7CVSS6.2AI score0.00305EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.7 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from a boundary check error in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...

7.8CVSS6.2AI score0.00093EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.10 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a boundary check error in ssDecodeLcsAssistDataReqMsg in ssLcsManagement.c, which could lead to remote elevation of privilege...

8CVSS6.4AI score0.0012EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.7 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google USA. A security vulnerability exists in Google Pixel that stems from improper validation of the tracepointmsghandler input in tracepointipc.c, which could lead to local elevation of privilege...

7.8CVSS6.2AI score0.00093EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.7 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from the lack of boundary checking in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...

7.8CVSS6.2AI score0.00093EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.10 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a heap buffer overflow in NrmmDecoder::DecodeSORTransparentContext in cnNrmmDecoder.cpp, which could lead to remote elevation of privilege...

8CVSS7AI score0.00122EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.13 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from the presence of post-release reuse of bigomap in bigoiommu.c, which could lead to local elevation of privilege...

6.7CVSS6.1AI score0.00077EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.8 views

QualitySoft QND 安全漏洞

QualitySoft QND is a comprehensive IT operations management tool from QualitySoft Japan. A security vulnerability exists in QualitySoft QND version 11.0.9i and prior versions, which stems from improper privilege management and may result in elevated privileges...

8.5CVSS7.7AI score0.00119EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.12 views

altera Quartus Prime Standard Edition Design Software 安全漏洞

altera Quartus Prime Standard Edition Design Software is an FPGA design and development software suite from altera, Inc. A security vulnerability exists in altera Quartus Prime Standard Edition Design Software, which originated from a vulnerability that could cause an unauthorized user to elevate...

6.7CVSS6.7AI score0.00107EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.13 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker to cause local elevation of privilege...

7.4CVSS6AI score0.001EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.11 views

Microsoft Windows Admin Center 安全漏洞

Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is primarily used to manage servers, clusters, and more. A security vulnerability exists in Microsoft Windows Admin Center that stems from improper access control and could lead to local...

7.8CVSS6.2AI score0.00462EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.15 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker to cause physical elevation of privilege...

6.8CVSS5.8AI score0.0014EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 6:13 p.m.8 views

CVE-2025-62221

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.02416EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/12/10 6:13 p.m.7 views

CVE-2025-62458

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.00667EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 6:13 p.m.8 views

CVE-2025-62466

Null pointer dereference in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00393EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 6:13 p.m.8 views

CVE-2025-62472

Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.02152EPSS
SaveExploits0References1
Rows per page
Query Builder