CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-64658 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2025-62573 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-64658

CVE-2025-64658 is a Windows Shell elevation-of-privilege vulnerability described as a race condition caused by concurrent execution using a shared resource. The available connected documents confirm impact as local privilege escalation for an attacker with local access and low privileges, requiri...

CVE-2025-62573

CVE-2025-62573 is a DirectX Graphics Kernel elevation-of-privilege vulnerability described as a use-after-free in Windows DirectX that enables an authorized, local attacker to obtain elevated privileges. The EUVD and related advisories confirm the issue and map it to a Windows DirectX privilege e...

CVE-2025-62572

CVE-2025-62572 is a Windows vulnerability in Application Information Services causing an out-of-bounds read that enables local privilege elevation for an authenticated attacker. Affected products are Windows components (notably Windows client/server SKUs referenced in the Microsoft advisories). M...

CVE-2025-62572 Application Information Service Elevation of Privilege Vulnerability

...

CVE-2025-62572 Application Information Service Elevation of Privilege Vulnerability

...

CVE-2025-62571 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-62571 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-62571

CVE-2025-62571 is a Windows Installer Elevation of Privilege vulnerability caused by improper input validation. The CVE affects Windows Installer, enabling an authorized, local attacker to escalate privileges (CVSS v3.1: 7.8, Local, Privileges Required: Low, User Interaction: None). Connected sou...

CVE-2025-62472 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2025-62472

CVE-2025-62472 affects Windows Remote Access Connection Manager. The issue is described as an elevation of privilege vulnerability caused by use of an uninitialized resource, allowing an authorized local attacker to gain higher privileges. Microsoft’s December 2025 updates (e.g., KB5071501/KB5071...

CVE-2025-62472 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2025-62470 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-62469 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-62469 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-62470

CVE-2025-62470 is a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that enables a locally authenticated attacker to escalate privileges. The vulnerability affects the CLFS driver in Windows, with local access required and high impact on confidentiality, integrity, ...

CVE-2025-62470 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-62469

CVE-2025-62469 describes a race-condition vulnerability in the Microsoft Brokering File System. The flaw is a concurrency issue in a shared resource that, when triggered by an authorized attacker, can lead to local privilege escalation. Publicly available sources in the connected documents confir...