37429 matches found
CVE-2025-60722
CVE-2025-60722 is a path traversal vulnerability in OneDrive for Android that can lead to elevation of privileges for an authorized user over a network. The advisory set confirms the affected product is OneDrive for Android and notes the root cause as improper pathname handling. Public exploitati...
CVE-2025-60719 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-60719 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-60719
Technical details about CVE-2025-60719 are not provided in the connected documents. The initial description notes a local privilege elevation in Windows AFD/WinSock, but no vendor/version specifics or fixes are included here. Monitor official advisories for updates.
CVE-2025-60710
CVE-2025-60710 is a Windows privilege-escalation vulnerability in the Host Process for Windows Tasks caused by improper link resolution before file access (link following). The CVE entry notes local abuse by an authorized attacker and a high impact (C:H, I:H, A:H) with local attack vector and no ...
CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability
...
EUVD-2025-93436
Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...
CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability
...
CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-60709
Technical details (affected product/version, root cause, impact, exploit specifics) are not publicly provided in the given documents for CVE-2025-60709. Monitor for updates from Microsoft; no additional vulnerability specifics are available here.
CVE-2025-60707
CVE-2025-60707 is described in the connected documents as a use-after-free vulnerability in the Multimedia Class Scheduler Service (MMCSS) that can enable an authorized, local attacker to escalate privileges. The NCSC advisory explicitly associates this CVE with MMCSS and marks the impact as obta...
CVE-2025-60707 Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability
...
CVE-2025-60707 Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability
...
CVE-2025-60705
Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2025-60704
Technical details about CVE-2025-60704 are not publicly provided in the supplied Connected Documents. The initial description notes a Kerberos cryptographic step missing that could enable network-based privilege elevation, but no vendor/version/impact specifics are disclosed here. Monitor for upd...
CVE-2025-60705 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2025-60705 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2025-60705
Technical details about CVE-2025-60705 (affected product, root cause, impact, or Fix) are not provided in the connected documents. Monitor for updates from Microsoft/MSRC for validation, impact, and remediation.