CVE-2025-31222

A correctness issue was addressed with improved checks. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A user may be able to elevate privileges...

CVE-2025-3876

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction function in all versions up to, and including, 3.8.1. This makes it possible for authenticated attackers, with...

Dell Storage Manager Elevation of Privilege Vulnerability

Dell Storage Manager is a centralized storage management platform from Dell USA. An elevation of privilege vulnerability exists in Dell Storage Manager, which can be exploited by an attacker to submit a special request for elevation of privilege...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from an improper input cleanup that could lead to elevation of privilege...

About Elevation of Privilege – Windows Common Log File System Driver (CVE-2025-29824) vulnerability

About Elevation of Privilege - Windows Common Log File System Driver CVE-2025-29824 vulnerability. The vulnerability from the April Microsoft Patch Tuesday allows an attacker operating under a regular user account to escalate their privileges to SYSTEM level. According to Microsoft, the...

CVE-2025-20164

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager DM of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this...

CVE-2025-29813

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-29813 Azure DevOps Elevation of Privilege Vulnerability

...

CVE-2025-29813

CVE-2025-29813 is an elevation of privilege vulnerability in Azure DevOps (Azure DevOps Server). The described flaw is an authentication bypass via assumed-immutable data / spoofable identity claims that could allow an unauthorized user to elevate privileges over the network. Connected sources co...

CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability

...

CVE-2025-29827

CVE-2025-29827 — Azure Automation Elevation of Privilege : The Azure Automation service is affected by an improper authorization vulnerability that can allow an authenticated attacker to elevate privileges over the network. Public sources in the provided documents indicate updates/fixes have been...

CVE-2025-22477

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges...

Azure Automation Elevation of Privilege Vulnerability

Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network...

Azure DevOps Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...

Microsoft Azure Automation 授权问题漏洞

Microsoft Azure Automation is a cloud automation service from Microsoft Corporation USA. The product focuses on providing cloud-based automation and configuration services. An authorization issue vulnerability exists in Microsoft Azure Automation that stems from improper authorization and could...

PT-2025-20428 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Azure DevOps affected versions not specified Visual Studio affected versions not specified Description: An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens. An attacker who successfully...

Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio that stems from improper...

CVE-2025-46265

On F5OS, an improper authorization vulnerability exists where remotely authenticated users LDAP, RADIUS, TACACS+ may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-20164

CVE-2025-20164 affects Cisco IOS Software’s Industrial Ethernet Switch DM. The issue is insufficient authorization validation, allowing an authenticated, remote attacker with valid credentials (privilege level 5+; read-only DM users are level 5) to send a crafted HTTP request and escalate to priv...

IXON VPN Client 安全漏洞

IXON VPN Client is an industrial equipment remote secure access solution from IXON, a VPN client optimized for the IXON Cloud platform. A security vulnerability exists in IXON VPN Client versions prior to 1.4.4, which stems from a competitive condition that could lead to local elevation of...