37437 matches found
CVE-2025-50174 Windows Device Association Broker Service Elevation of Privilege Vulnerability
...
CVE-2025-50174
CVE-2025-50174 is a use-after-free in the Windows Device Association Broker service that enables a local attacker to escalate privileges. Affected platforms include Windows OS versions addressed by KB5066835 (OS builds 26200.6899 and 26100.6899). Root cause: use-after-free in the broker service; ...
CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-48004
CVE-2025-48004 is a local privilege elevation in Microsoft Brokering File System caused by a use-after-free bug. The vulnerability allows an authenticated local attacker to escalate privileges. Public disclosures identify the affected component as the Microsoft Brokering File System, with CVSS-li...
CVE-2025-47989
Azure Connected Machine Agent suffers an improper access control flaw that allows an authorized, locally situated attacker to elevate privileges. Affected component: Azure Connected Machine Agent; root cause is access-control misimplementation. Impact per CVSS indicates high confidentiality, inte...
CVE-2025-47989 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-47989 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Windows Authentication Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
Storport.sys Driver Elevation of Privilege Vulnerability
Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...
Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...