CVE-2025-30387 Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability

...

CVE-2025-30387

CVE-2025-30387 is a path traversal and elevation-of-privilege vulnerability affecting Microsoft Azure’s Document Intelligence Studio On-Prem implementation. The initial description identifies an improper limitation of a pathname to a restricted directory, enabling an unauthenticated or network-ba...

CVE-2025-29976 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2025-29976

CVE-2025-29976 affects Microsoft SharePoint (Office SharePoint Server/SharePoint Server) with an elevation-of-privilege vulnerability due to improper privilege management. An attacker with local access and low privileges could elevate privileges on the affected system, as indicated by the CVE act...

CVE-2025-29976 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2025-29973 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2025-29973 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2025-29975 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-29975 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-29973

Azure File Sync Elevation of Privilege (CVE-2025-29973): improper access control allows an authorized local attacker to escalate privileges. Affected product: Microsoft Azure File Sync. CVSS v3.1 base score 7.0 (HIGH). Remediation: patch/update from Microsoft; NCSC confirms fixes have been releas...

CVE-2025-29970 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-29970

CVE-2025-29970 is a local privilege-escalation vulnerability in the Microsoft Brokering File System caused by a use-after-free condition. An authorized attacker could exploit this to elevate privileges on the host. Public documentation identifies the affected component and the root cause as a use...

CVE-2025-29970 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-26684 Microsoft Defender Elevation of Privilege Vulnerability

...

CVE-2025-26684 Microsoft Defender Elevation of Privilege Vulnerability

...

Description of the security update for SharePoint Enterprise Server 2016: May 13, 2025 (KB5002722)

None None...

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: May 13, 2025 (KB5002712)

None None...

Description of the security update for SharePoint Server Subscription Edition: May 13, 2025 (KB5002709)

None None...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure allows an unauthorized attacker to elevate privileges over a network...