37642 matches found
CVE-2025-47962 Windows SDK Elevation of Privilege Vulnerability
...
CVE-2025-47962 Windows SDK Elevation of Privilege Vulnerability
...
CVE-2025-47962
CVE-2025-47962 is an elevation-of-privilege vulnerability in Windows SDK caused by improper access control, allowing an authorized local attacker to gain SYSTEM/privilege-level access. A PoC exploit exists in a GitHub repo (CVE-2025-47962-POC) showing local DLL loading and service manipulation (I...
CVE-2025-47955
CVE-2025-47955 involves improper privilege management in Windows Remote Access Connection Manager, enabling local privilege escalation for an authorized attacker. CVSS 3.1 base 7.8 (HIGH): Local, low complexity, no user interaction, with high impact on confidentiality, integrity, and availability...
CVE-2025-47955 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
CVE-2025-47955 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
CVE-2025-33075 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-33067 Windows Task Scheduler Elevation of Privilege Vulnerability
...
CVE-2025-33067 Windows Task Scheduler Elevation of Privilege Vulnerability
...
CVE-2025-33075 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-33075
CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...
CVE-2025-33067
CVE-2025-33067 — Windows Kernel local privilege escalation due to improper privilege management. Affects the Windows Kernel; attacker can gain elevated rights locally with no user interaction. CVSSv3.1 base score 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected sources confirm the impact as l...
CVE-2025-32721
CVE-2025-32721 is a Windows Recovery Driver privilege-escalation flaw caused by improper link resolution before file access. Reported CVSS v3.1 base score 7.3 (High) with local, low-attack-skill requirements, user interaction required, and high impact on confidentiality, integrity, and availabili...
CVE-2025-32721 Windows Recovery Driver Elevation of Privilege Vulnerability
...
CVE-2025-32721 Windows Recovery Driver Elevation of Privilege Vulnerability
...
CVE-2025-32718
CVE-2025-32718 : Integer overflow or wraparound in Windows SMB enables a locally authenticated attacker to elevate privileges. Connected sources confirm impact as local privilege escalation on Windows SMB, with CVSS v3.1 base score 7.8 (HIGH) and local attack vector. Public references in NVD/NCSC...
CVE-2025-32718 Windows SMB Client Elevation of Privilege Vulnerability
...
CVE-2025-32718 Windows SMB Client Elevation of Privilege Vulnerability
...
CVE-2025-32716
CVE-2025-32716 (Windows Media) is a Windows component vulnerability described as an out-of-bounds read that enables a locally authenticated attacker to elevate privileges. The NCSC advisory lists CVE-2025-32716 under Windows Media with a base impact of 7.80 (Obtaining elevated privileges). No exp...