Windows NTLM Elevation of Privilege Vulnerability

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally...

SAP HCM My Timesheet Fiori 安全漏洞

SAP HCM My Timesheet Fiori is a timesheet application from SAP, Germany. A security vulnerability exists in SAP HCM My Timesheet Fiori 2.0 that stems from a lack of authorization checking and could lead to elevated privileges...

Microsoft Windows Defender 安全漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windo...

KB5065429: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2025)

The remote Windows host is missing security update 5065429. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

PT-2025-36842

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: A stack-based buffer overflow exists in the Windows Ancillary Function Driver for WinSock. This issue allows a locally authorized attacker to elevate...

KLA87443 PE vulnerabuility in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-55245 Related products Xbox-Gaming-Services CVE list CVE-2025-55245 critical Solution Install necessary updates from the KB section,...

PT-2025-36879

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue exists within the Windows Defender Firewall Service. This flaw enables a locally authenticated attacker to gain elevated privileges on the...

KLA87445 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of...

Microsoft Xbox Gaming Services < 30.104.13001.0 Elevation of Privilege (September 2025)

The version of Microsoft Xbox Gaming Services on the remote Windows host is prior to 30.104.13001.0. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges...

KB5065425: Windows Server version 23H2 Security Update (September 2025)

The remote Windows host is missing security update 5065425. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

KB5065427: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2025)

The remote Windows host is missing security update 5065427. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

PT-2025-36860

Name of the Vulnerable Software and Affected Versions: Local Security Authority Subsystem Service affected versions not specified Description: An elevation-of-privilege vulnerability allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer versi...

Google Android elevation of privilege vulnerability (CNVD-2025-21350)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to an obfuscated agent in the system's user interface. An attacker can exploit the vulnerability to gain elevated privileges on the system...

Microsoft AutoUpdate for macOS < 4.80 Elevation of Privilege (September 2025)

The version of Microsoft AutoUpdate installed on the remote macOS ost is prior to 4.80. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate...

PT-2025-36824

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An untrusted pointer dereference in Windows Desktop Window Manager DWM can allow a locally authenticated attacker to gain elevated privileges. This issue allows attackers to affect the...

PT-2025-36817

Name of the Vulnerable Software and Affected Versions: Azure Windows Virtual Machine Agent affected versions not specified Description: An improper access control issue exists in the Azure Windows Virtual Machine Agent. This allows an authorized attacker to elevate privileges locally...

CVE-2025-43722

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges...

CVE-2025-43722

CVE-2025-43722 affects Dell PowerScale OneFS versions prior to 9.12.0.0 and is due to improper privilege management. A high-privilege attacker with local access could potentially escalate privileges. The issue is documented across multiple sources: affected product is Dell PowerScale OneFS; root ...

Google Android elevation of privilege vulnerability (CNVD-2025-23040)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a clickjacking/overwriting attack in the maybeShowDialog function in ControlsSettingsDialogManager.kt that results in ControlsSettingsTialog...