37429 matches found
CVE-2025-62462 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2025-62462
CVE-2025-62462 is a Windows ProjFS (Projected File System) Elevation of Privilege vulnerability caused by a buffer over-read, enabling an authorized local attacker to escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL and LOW privileges required and no user interaction. Connec...
CVE-2025-62461 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2025-62455 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
...
CVE-2025-62455
CVE-2025-62455 relates to an Elevation of Privilege in Windows Message Queuing (MSMQ). The initial description cites improper input validation in MSMQ that could allow an authorized local attacker to elevate privileges. Connected documents corroborate MSMQ as the affected component and reference ...
CVE-2025-62461 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2025-62455 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
...
CVE-2025-62461
CVE-2025-62461 is a Windows Projected File System Filter Driver elevation-of-privilege vulnerability caused by a buffer over-read. It allows an authorized local attacker to elevate privileges. Public sources (NCSC/NVD-style listings) assign a CVSS v3.1 base score of 7.8 (High) with Local attack v...
CVE-2025-59517 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-59517 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-59516 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-59516
CVE-2025-59516 is a Windows Storage VSP Driver elevation-of-privilege vulnerability. The issue is described as missing authentication for a critical function, enabling an authorized local attacker to elevate privileges. Public references in connected documents confirm the affected component is th...
CVE-2025-59516 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-64673 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-64673 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-64673
CVE-2025-64673 is a Windows Storage VSP Driver elevation-of-privilege vulnerability in the Storvsp.sys component. The connected sources confirm improper access control in Storvsp.sys that could allow an authorized, local attacker with low privileges to obtain higher privileges. The CVSS v3.1 base...
EUVD-2025-202236
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2025-64666
CVE-2025-64666 affects Microsoft Exchange Server and is caused by improper input validation that permits an authenticated, network-accessing attacker to elevate privileges. The vulnerability is categorized with a high impact (C/H, I/H, A/H) and requires low privileges with no user interaction. Pu...