37431 matches found
CVE-2025-59199
CVE-2025-59199 affects the Software Protection Platform (SPP). It is described as an improper access control vulnerability that allows a locally authenticated attacker to escalate privileges (CVSSv3.1 base score 7.8, HIGH; attack vector: LOCAL; privileges required: LOW; user interaction: NONE). T...
CVE-2025-58728 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-58728 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-58728
CVE-2025-58728 is a Windows Bluetooth Service use-after-free elevation-of-privilege vulnerability. Connected documents corroborate a local, privilege-escalation impact (CVSS-like note: 7.8 HIGH, local access, no user interaction). The NCSC data lists CVE-2025-58728 under Windows Bluetooth Service...
CVE-2025-58722
CVE-2025-58722 is a heap-based buffer overflow in Windows DWM that could enable a locally authenticated attacker to elevate privileges. The available connected documents confirm the affected component (Windows DWM) and the local privilege elevation impact, but do not provide concrete exploit deta...
CVE-2025-58722 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-58719 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58719 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58722 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-58719
CVE-2025-58719 affects the Connected Devices Platform Service (Cdpsvc) in Windows. The issue is a use-after-free vulnerability that could allow an authorized local attacker to achieve privilege elevation. The connected documents confirm the vulnerability and its local impact, but do not provide e...
CVE-2025-58716 Windows Speech Runtime Elevation of Privilege Vulnerability
...
CVE-2025-58716 Windows Speech Runtime Elevation of Privilege Vulnerability
...
CVE-2025-58716
CVE-2025-58716 affects Microsoft Windows Speech and is caused by improper input validation, enabling an authorized attacker to perform local privilege escalation. The CVE is documented with a CVSS v3.1 base score of 8.8 (High) and LOCAL attack vector, requiring LOW privileges and no user interact...
CVE-2025-55701 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-58715 Windows Speech Runtime Elevation of Privilege Vulnerability
...
CVE-2025-58715
CVE-2025-58715 is a Windows Speech vulnerability where an integer overflow/wraparound in the Windows Speech component could enable an authorized, local attacker to elevate privileges. The provided materials identify the affected component as Microsoft Windows Speech and the impact as local privil...
CVE-2025-55701
Technical details for CVE-2025-55701 (affected product/component/versions, root cause, exploit information, or remediation) are not publicly provided in the connected documents; monitor for updates from official sources.
CVE-2025-58715 Windows Speech Runtime Elevation of Privilege Vulnerability
...