CVE-2025-54894

CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.

CVE-2025-54111 Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

...

CVE-2025-54894 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...

CVE-2025-54110 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-54110

CVE-2025-54110 concerns a Windows Kernel integer overflow in NtQueryDirectoryObject that could enable local privilege escalation. Connected PoCs describe a kernel-EoP flow via crafted inputs, thresholds (e.g., 0xFFFFFDBC) and direct memory handling, but reports assert exploitation yields only STA...

CVE-2025-54110 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2025-54102 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-54102

CVE-2025-54102 is a use-after-free in the Windows Connected Devices Platform Service that allows an authenticated, local attacker to escalate privileges (obtain increased entitlements). The connected documents corroborate the local-privilege-escalation impact (NCSC advisory lists CVE-2025-54102 w...

CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-54099

CVE-2025-54099 affects the Windows Ancillary Function Driver for WinSock. The issue is a stack-based buffer overflow that can be exploited by an authorized, locally-located attacker to obtain elevated privileges. The connected NCSC advisory corroborates the CVE’s association with privilege escala...

CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability

...

CVE-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability

...

CVE-2025-49734

CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...

Windows BitLocker Elevation of Privilege Vulnerability

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...