Security Updates for Azure Connected Machine Agent < 1.56 (September 2025)

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead...

Dell PowerProtect Data Manager Elevation of Privilege Vulnerability

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. An elevation of privilege vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which stem...

Security Updates for Azure Connected Machine Agent < 1.49

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead...

CVE-2025-54913

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally...

CVE-2025-54894

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2025-54112

Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally...

CVE-2025-54091

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-55245

Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...

CVE-2025-54115

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-54093

Time-of-check time-of-use toctou race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2025-54116

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally...

CVE-2025-54110

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-54099

Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-9059

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059

CVE-2025-9059 affects the Altiris Core Agent Updater package (AeXNSC.exe). The vulnerability is an elevation of privileges caused by DLL hijacking, described in multiple sources as a local attack requiring low privileges and user interaction of NONE, with high impact overall (confidentiality, int...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

PT-2025-37114

Name of the Vulnerable Software and Affected Versions: Altiris Core Agent Updater affected versions not specified Description: The Altiris Core Agent Updater package AeXNSC.exe is susceptible to an elevation of privileges issue due to DLL hijacking. Recommendations: At the moment, there is no...

Unspecified Vulnerability in NVIDIA NVDebug (CNVD-2025-21177)

NVIDIA NVDebug is a debugging and diagnostic tool from NVIDIA. NVIDIA NVDebug contains a security vulnerability that can be exploited by attackers to potentially cause privileged account access, which could lead to code execution, denial of service, elevation of privilege, information disclosure,...

Siemens SINAMICS G220, SINAMICS S210 and SINAMICS S200 Elevation of Privilege Vulnerability

SINAMICS G220 is a high-performance, single-axis variable-frequency drive from Siemens.SINAMICS S210 is a high-performance, single-axis servo drive from Siemens.SINAMICS S200 is a high-performance, cost-effective, single-axis AC servo drive from Siemens for standard automation applications...