Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Description of the security update for Microsoft Exchange Server 2019 CU15: December 9, 2025 (KB5071875)

None None...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: December 9, 2025 (KB5071876)

None None...

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Windows Storage VSP Driver Elevation of Privilege Vulnerability

Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)

None None...

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

Application Information Service Elevation of Privilege Vulnerability

Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 146 and Firefox...

PT-2025-50194

Name of the Vulnerable Software and Affected Versions Application Information Services affected versions not specified Description An out-of-bounds read issue exists in Application Information Services, potentially allowing a local attacker to gain elevated privileges. The issue allows attackers ...

PT-2025-50169

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A flaw exists in the Microsoft Brokering File System related to concurrent execution using a shared resource with improper synchronization, creating a race condition...

PT-2025-50161

Name of the Vulnerable Software and Affected Versions Windows Projected File System Filter Driver affected versions not specified Description A flaw exists in the Windows Projected File System Filter Driver that could allow a local attacker to gain elevated privileges. The issue involves a buffer...

Microsoft Message Queuing 输入验证错误漏洞

Microsoft Message Queuing is a Microsoft Corporation USA solution for implementing asynchronous and synchronous scenarios that require high performance. An input validation error vulnerability exists in Microsoft Message Queuing. An attacker could exploit the vulnerability to elevate privileges...

PT-2025-50191

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A flaw exists in the Microsoft Brokering File System that could allow an attacker to gain higher-level access to a system. This issue involves a use-after-free...

PT-2025-50112

Name of the Vulnerable Software and Affected Versions Dell Encryption versions prior to 11.12.1 Description Dell Encryption contains an Improper Link Resolution Before File Access 'Link Following' issue. A local malicious user could potentially exploit this, leading to Elevation of privileges...