37437 matches found
CVE-2025-59494
CVE-2025-59494 corresponds to an elevation-of-privilege vulnerability in Microsoft Azure Monitor Agent (Azure Monitor Agent). The issue is described as improper access control that allows an authorized local attacker to elevate privileges. CVSS v3.1 base score 7.8 (High), with LOCAL attack, low a...
CVE-2025-59291 Confidential Azure Container Instances Elevation of Privilege Vulnerability
...
CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability
...
CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability
...
CVE-2025-59291 Confidential Azure Container Instances Elevation of Privilege Vulnerability
...
CVE-2025-59292
CVE-2025-59292 affects Confidential Azure Container Instances. External control of a file name or path in this component can let an authorized attacker elevate privileges locally. The CVE is corroborated by multiple sources in the Connected Documents (Microsoft MSRC entry, EU/NCSC/MSS intel, and ...
CVE-2025-59291
Summary: CVE-2025-59291 affects Confidential Azure Container Instances. The issue is described as external control of a file name or path, enabling an authorized attacker to elevate privileges locally. Affected product: Confidential Azure Container Instances (Azure). Root cause / vulnerability cl...
CVE-2025-59290 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59290
CVE-2025-59290 is a local privilege escalation caused by a use-after-free in Windows Bluetooth Service. Affected component: Windows Bluetooth Service. Root cause: use-after-free. Impact: an authorized attacker can elevate privileges locally. Exploitation status is not specified in the provided do...
CVE-2025-59290 Windows Bluetooth Service Elevation of Privilege Vulnerability
...
CVE-2025-59281
Xbox Gaming Services suffers an elevation of privilege via improper link resolution before file access ("link following"). An authorized local attacker can escalate to higher privileges. CVSSv3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, no user interaction. Remediation...
CVE-2025-59281 Xbox Gaming Services Elevation of Privilege Vulnerability
...
CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-59277
CVE-2025-59277 involves improper validation of a specified input type in Windows Authentication Methods, enabling a locally authenticated attacker to elevate privileges. Connected MSKBs and EUVD-2025-34369 corroborate the Windows Authentication Methods focus and local privilege escalation risk. T...
CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59255
CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...
CVE-2025-59254 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59254
Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...