37431 matches found
CVE-2025-59291
Summary: CVE-2025-59291 affects Confidential Azure Container Instances. The issue is described as external control of a file name or path, enabling an authorized attacker to elevate privileges locally. Affected product: Confidential Azure Container Instances (Azure). Root cause / vulnerability cl...
CVE-2025-59290 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59290
CVE-2025-59290 is a local privilege escalation caused by a use-after-free in Windows Bluetooth Service. Affected component: Windows Bluetooth Service. Root cause: use-after-free. Impact: an authorized attacker can elevate privileges locally. Exploitation status is not specified in the provided do...
CVE-2025-59290 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59281
Xbox Gaming Services suffers an elevation of privilege via improper link resolution before file access ("link following"). An authorized local attacker can escalate to higher privileges. CVSSv3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, no user interaction. Remediation...
CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability
...
CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-59277
CVE-2025-59277 involves improper validation of a specified input type in Windows Authentication Methods, enabling a locally authenticated attacker to elevate privileges. Connected MSKBs and EUVD-2025-34369 corroborate the Windows Authentication Methods focus and local privilege escalation risk. T...
CVE-2025-59254
Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...
CVE-2025-59254 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59255
CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...
CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59254 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59249 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-59249
CVE-2025-59249 is a Microsoft Exchange Server elevation-of-privilege vulnerability described as caused by weak authentication. The CVE is discussed across multiple sources (CNVD, EUVD, NCSC, MSRC and CVE listings) with details indicating that an attacker who is already authenticated can escalate ...
CVE-2025-59249 Microsoft Exchange Server Elevation of Privilege Vulnerability
...