CVE-2025-55320 Configuration Manager Elevation of Privilege Vulnerability

...

CVE-2025-55320 Configuration Manager Elevation of Privilege Vulnerability

...

CVE-2025-55320

The CVE-2025-55320 case is a SQL injection–based Elevation of Privilege vulnerability in Microsoft Endpoint Configuration Manager / Configuration Manager. The issue arises from improper neutralization of special elements in SQL commands, enabling an authorized attacker to elevate privileges on a ...

CVE-2025-24052 Windows Agere Modem Driver Elevation of Privilege Vulnerability

...

CVE-2025-24052 Windows Agere Modem Driver Elevation of Privilege Vulnerability

...

CVE-2025-24990 Windows Agere Modem Driver Elevation of Privilege Vulnerability

...

CVE-2025-24990

CVE-2025-24990 is a local privilege escalation in the Microsoft‑supplied Agere Modem Driver (ltmdm64.sys). The issue is described as an untrusted pointer dereference within the driver, enabling a local attacker to escalate privileges to administrator. Microsoft addressed it by removing the driver...

CVE-2025-55247 .NET Elevation of Privilege Vulnerability

...

CVE-2025-55247

CVE-2025-55247 is a local elevation-of-privilege vulnerability in .NET caused by improper link resolution before file access ("link following"). The issue affects .NET 8.0.x, 9.0.x, and 10.0.x on Linux (per the advisories) and can be triggered by an authorized user. Mitigation is to update to fix...

CVE-2025-55247 .NET Elevation of Privilege Vulnerability

...

CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2025-53782

CVE-2025-53782 refers to an elevation-of-privilege vulnerability in Microsoft Exchange Server caused by an incorrect implementation of the authentication algorithm, enabling an unauthorized, local attacker to escalate privileges. Across connected sources, the vulnerability is associated with mult...

CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability

...

CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability

...

CVE-2025-50174

CVE-2025-50174 is a use-after-free in the Windows Device Association Broker service that enables a local attacker to escalate privileges. Affected platforms include Windows OS versions addressed by KB5066835 (OS builds 26200.6899 and 26100.6899). Root cause: use-after-free in the broker service; ...

CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-48004

CVE-2025-48004 is a local privilege elevation in Microsoft Brokering File System caused by a use-after-free bug. The vulnerability allows an authenticated local attacker to escalate privileges. Public disclosures identify the affected component as the Microsoft Brokering File System, with CVSS-li...

CVE-2025-47989

Azure Connected Machine Agent suffers an improper access control flaw that allows an authorized, locally situated attacker to elevate privileges. Affected component: Azure Connected Machine Agent; root cause is access-control misimplementation. Impact per CVSS indicates high confidentiality, inte...