37431 matches found
CVE-2025-59213 Configuration Manager Elevation of Privilege Vulnerability
...
CVE-2025-59210
CVE-2025-59210 affects Windows Resilient File System (ReFS) Deduplication Service and enables local elevation of privileges. Base metrics show CVSS v3.1: Local, High impact (C/H), no user interaction required, with total impact on confidentiality, integrity, and availability. Microsoft’s October ...
CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
...
CVE-2025-59205
CVE-2025-59205 is described as a race-condition vulnerability in the Microsoft Graphics Component caused by concurrent access to a shared resource, enabling an authorized local attacker to elevate privileges. The connected EUVD-2025-34293 entry reiterates the root cause and local privilege escala...
CVE-2025-59205 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59205 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2025-59194 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-59194 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2025-59194
CVE-2025-59194 is a Windows Kernel local privilege-escalation vulnerability (uninitialized resource) with a CVSS v3.1 base score of 7.0 (Local, High). Public exploits/POC exist (e.g., GitHub). Public advisories and MSRC/MSKB entries indicate Microsoft has released updates to address this vulnerab...
CVE-2025-59193 Windows Management Services Elevation of Privilege Vulnerability
...
CVE-2025-59192 Storport.sys Driver Elevation of Privilege Vulnerability
...
CVE-2025-59192
CVE-2025-59192 is a local privilege-escalation issue described as a buffer over-read in Storport.sys. The vulnerability affects the Storport.sys driver and is assigned a CVSS v3.1 score of 7.8 (Local, Privileges Required: Low, User Interaction: None) with Impact on confidentiality, integrity, and...
CVE-2025-59192 Storport.sys Driver Elevation of Privilege Vulnerability
...
CVE-2025-59193 Windows Management Services Elevation of Privilege Vulnerability
...
CVE-2025-59193
CVE-2025-59193 describes a race condition in Windows Management Services (a Windows component) where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The description in the CVE notes local, privilege-escalation impact due to improper synchronizatio...
CVE-2025-59191 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-59191 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-59191
CVE-2025-59191 is a Windows security vulnerability in the Connected Devices Platform Service (Cdpsvc). It is described as a heap-based buffer overflow that, when exploited by an authenticated local attacker, enables elevation of privileges. The CVE is documented with a high impact (local, privile...
CVE-2025-59189
CVE-2025-59189 is a local privilege-escalation in Microsoft Brokering File System (Windows). Description: use-after-free in the Brokering File System allows a non-remote, local attacker to escalate privileges. The patched fix is included in the October 2025 Windows security update KB5066835 (OS B...