CVE-2025-53800

CVE-2025-53800 is a local privilege escalation in the Microsoft Graphics Component. The Initial Description notes privilege elevation for an authorized attacker, but does not provide technical details on the vulnerable subcomponent, root cause, affected versions, exploit vectors, or exact impact ...

CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-49692

CVE-2025-49692 describes an elevation of privilege vulnerability in the Azure Connected Machine Agent (Azure Windows Virtual Machine Agent). The issue is due to improper access control, allowing an authorized attacker with local access and low user interaction to gain total impact (high confident...

CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-55316 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-55316

CVE-2025-55316 is an elevation-of-privilege vulnerability in Microsoft Azure Arc/Azure Connected Machine Agent. External control of a file name or path is the root cause, enabling an authorized local attacker to obtain higher privileges on the affected host. The CVE is reflected in multiple feeds...

CVE-2025-55317 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

...

CVE-2025-55316 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-55317 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

...

CVE-2025-55317

CVE-2025-55317 concerns Microsoft AutoUpdate (MAU) and its elevation of privilege via improper link resolution before file access ("link following"). Affected: MAU components on macOS; vulnerability allows an authorized local attacker to escalate privileges. Root cause: improper link resolution b...

CVE-2025-55245 Xbox Gaming Services Elevation of Privilege Vulnerability

...

CVE-2025-55245 Xbox Gaming Services Elevation of Privilege Vulnerability

...

CVE-2025-55245

CVE-2025-55245 affects Microsoft Xbox Gaming Services and is caused by improper link resolution before file access ("link following"), enabling an authorized local attacker to elevate privileges. The vulnerability is mapped to a local attack vector with high impact on confidentiality, integrity, ...

CVE-2025-55223 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-55223

CVE-2025-55223 involves a race condition in the Graphics Kernel allowing a locally authenticated attacker to elevate privileges. The initial entry notes local privilege elevation via concurrent execution with improper synchronization. Connected documents confirm the CVE-55223 reference in a risk ...

CVE-2025-55223 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2025-54918 Windows NTLM Elevation of Privilege Vulnerability

...

CVE-2025-54918 Windows NTLM Elevation of Privilege Vulnerability

...

CVE-2025-54918

CVE-2025-54918 describes an improper authentication flaw in Windows NTLM that enables a network-authenticated attacker to elevate privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and privileges required. A PoC exploit exists on GitHub (CVE-2025-54918-...

CVE-2025-54913

CVE-2025-54913 affects Windows UI XAML Maps MapControlSettings. It is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to locally elevate privileges. Reported CVSS base score ~7.8 (HIGH) with LOCAL attack vector...