CVE-2025-47971 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2025-47971

CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...

CVE-2025-21195 Azure Service Fabric Runtime Elevation of Privilege Vulnerability

...

CVE-2025-21195 Azure Service Fabric Runtime Elevation of Privilege Vulnerability

...

CVE-2025-47159 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

CVE-2025-47159 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

...

Exploit for Link Following in Microsoft

Description This is PoC for CVE-2025-48799, an elevation of pr...

CVE-2025-7326 EOL ASP.NET Core Elevation of Privilege Vulnerability

...

CVE-2025-7326 EOL ASP.NET Core Elevation of Privilege Vulnerability

...

Description of the security update for Visual Studio 2015 Update 3: July 8, 2025 (KB5063035)

None None...

Microsoft Teams Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Teams allows an authorized attacker to elevate privileges locally...

Windows Notification Elevation of Privilege Vulnerability

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Windows Media Elevation of Privilege Vulnerability

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

Windows Shell Elevation of Privilege Vulnerability

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...