CVE-2025-54115 Windows Hyper-V Elevation of Privilege Vulnerability

...

CVE-2025-54116 Windows MultiPoint Services Elevation of Privilege Vulnerability

...

CVE-2025-54116

CVE-2025-54116 affects Windows MultiPoint Services with Improper access control that enables local privilege escalation by an authorized user. CVSS 3.1 base score 7.3 (Local, Privilege Required Low, User Interaction Required, High Confidentiality/Integrity/Availability impact). The Connected docu...

CVE-2025-54112

CVE-2025-54112 is a local privilege escalation in the Microsoft Virtual Hard Drive caused by a use-after-free, enabling an authenticated attacker to obtain higher privileges on affected Windows systems. The connected sources (including the NCSC advisory and the CVE table for Windows Hyper-V) cate...

CVE-2025-54112 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-54112 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-54109 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-54109

CVE-2025-54109 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion that can enable local privilege escalation by an authorized attacker. Connected sources (NCSC advisory) list CVE-2025-54109 with a base score of 6.7 (Medium) and attribute the impact to lo...

CVE-2025-54109 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-54108

CVE-2025-54108 is a local-elevation-of-privilege in the Windows Capability Access Management Service (camsvc) caused by a race-condition with an improper synchronization of a shared resource. Publicly disclosed in Microsoft’s CVE entry and mirrored in MSRC/KB notes, the vulnerability affects Wind...

CVE-2025-54108 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2025-54108 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2025-54105 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-54105 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-54104

CVE-2025-54104 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion (incompatible type) issue that could enable a locally authenticated attacker to elevate privileges. Related connected docs (NCSC) list Defender Firewall Service and classify the impact as ...

CVE-2025-54105

CVE-2025-54105 describes a race condition in the Microsoft Brokering File System that can enable local privilege escalation by an authorized attacker. Connected sources confirm a Windows-focused vulnerability and indicate remediation via Microsoft hotpatches and September 2025 security updates (K...

CVE-2025-54104 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-54104 Windows Defender Firewall Service Elevation of Privilege Vulnerability

...

CVE-2025-54103 Windows Management Service Elevation of Privilege Vulnerability

...

CVE-2025-54098

Technical details about CVE-2025-54098 (Hyper-V local privilege elevation) are not provided in the connected documents. Monitor for future updates from Microsoft for affected products, impact, and mitigations.