CVE-2025-59189 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-59187 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-59187

CVE-2025-59187 corresponds to a Windows Kernel local privilege escalation described in EUVD-2025-34304 as due to improper input validation. The vulnerability affects the Windows Kernel with the potential for an authorized attacker to elevate privileges locally. The connected KB updates discuss Wi...

CVE-2025-58727

CVE-2025-58727 describes a race-condition in the Windows Connected Devices Platform Service (Cdpsvc) that allows an authenticated, local attacker to elevate privileges. The issue originates from concurrent execution using a shared resource without proper synchronization. Documents identify the af...

CVE-2025-58727 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-58726 Windows SMB Server Elevation of Privilege Vulnerability

...

CVE-2025-58725

CVE-2025-58725 is described in connected documents as a heap-based buffer overflow in Windows COM that allows a locally authenticated attacker to elevate privileges. The CVE is associated with Windows COM components, with a CVSS v3.1 score of 7.0 (Local, High impact, Privilege escalation) and Exp...

CVE-2025-58725 Windows COM+ Event System Service Elevation of Privilege Vulnerability

...

CVE-2025-58726 Windows SMB Server Elevation of Privilege Vulnerability

...

CVE-2025-58725 Windows COM+ Event System Service Elevation of Privilege Vulnerability

...

CVE-2025-58724

CVE-2025-58724 : Affects Azure Connected Machine Agent. Description confirms an improper access control flaw that enables an authorized local attacker to escalate privileges. CVSS v3.1/3.1 base score 7.8 (HIGH) with local, low complexity, and no user interaction requirements; impact on confidenti...

CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-58714 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-58714

CVE-2025-58714 is an elevation-of-privilege issue in the Windows Ancillary Function Driver for WinSock caused by improper access control. The description indicates an authorized attacker could locally elevate privileges. Connected Microsoft advisories (KB/OS update pages) show this CVE among Wind...

CVE-2025-55697

CVE-2025-55697: Heap-based buffer overflow in Azure Local allows an authenticated, local attacker to escalate privileges. The vulnerability is mapped to Windows OS updates (KB5066835) and related advisories; Microsoft states a local elevation of privileges with high impact. Public exploits are no...

CVE-2025-55697 Azure Local Elevation of Privilege Vulnerability

...

CVE-2025-55697 Azure Local Elevation of Privilege Vulnerability

...

CVE-2025-55696 NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

...

CVE-2025-55696

CVE-2025-55696 describes a time-of-check time-of-use (TOCTOU) race condition in the NtQueryInformation Token function (ntifs.h) that can allow a local, authorized attacker to elevate privileges. The connected Microsoft advisories indicate Windows updates addressing security vulnerabilities in Oct...