37437 matches found
CVE-2025-55677
CVE-2025-55677 affects the Windows Device Association Broker service and is caused by an untrusted pointer dereference that enables local elevation of privileges for an authenticated user. Microsoft corresponding fix is in KB5066835 (OS builds 26200.6899 and 26100.6899); applying these updates re...
CVE-2025-55677 Windows Device Association Broker Service Elevation of Privilege Vulnerability
...
CVE-2025-55339
CVE-2025-55339 : Windows Network Driver Interface Specification (NDIS) driver contains an out-of-bounds read that enables an authorized, local attacker to achieve elevated privileges. The Initial and Connected documents confirm the vulnerability description but do not provide concrete remediation...
CVE-2025-55335 Windows NTFS Elevation of Privilege Vulnerability
...
CVE-2025-55335 Windows NTFS Elevation of Privilege Vulnerability
...
CVE-2025-55335
CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...
CVE-2025-55320
The CVE-2025-55320 case is a SQL injection–based Elevation of Privilege vulnerability in Microsoft Endpoint Configuration Manager / Configuration Manager. The issue arises from improper neutralization of special elements in SQL commands, enabling an authorized attacker to elevate privileges on a ...
CVE-2025-55320 Configuration Manager Elevation of Privilege Vulnerability
...
CVE-2025-55320 Configuration Manager Elevation of Privilege Vulnerability
...
CVE-2025-24052 Windows Agere Modem Driver Elevation of Privilege Vulnerability
...
CVE-2025-24052 Windows Agere Modem Driver Elevation of Privilege Vulnerability
...
CVE-2025-24990
CVE-2025-24990 is a local privilege escalation in the Microsoft‑supplied Agere Modem Driver (ltmdm64.sys). The issue is described as an untrusted pointer dereference within the driver, enabling a local attacker to escalate privileges to administrator. Microsoft addressed it by removing the driver...
CVE-2025-24990 Windows Agere Modem Driver Elevation of Privilege Vulnerability
...
CVE-2025-55247 .NET Elevation of Privilege Vulnerability
...
CVE-2025-55247
CVE-2025-55247 is a local elevation-of-privilege vulnerability in .NET caused by improper link resolution before file access ("link following"). The issue affects .NET 8.0.x, 9.0.x, and 10.0.x on Linux (per the advisories) and can be triggered by an authorized user. Mitigation is to update to fix...
CVE-2025-55247 .NET Elevation of Privilege Vulnerability
...
CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-53782
CVE-2025-53782 refers to an elevation-of-privilege vulnerability in Microsoft Exchange Server caused by an incorrect implementation of the authentication algorithm, enabling an unauthorized, local attacker to escalate privileges. Across connected sources, the vulnerability is associated with mult...