Windows Kernel Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...

KB5065226 - Description of the security update for SQL Server 2016 SP3 GDR: September 9, 2025

None None...

Windows TCP/IP Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Elevation of Privilege Vulnerability

No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

KB5065221 - Description of the security update for SQL Server 2022 GDR: September 9, 2025

None None...

Windows MultiPoint Services Elevation of Privilege Vulnerability

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally...

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

Windows BitLocker Elevation of Privilege Vulnerability

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

Windows NTLM Elevation of Privilege Vulnerability

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...

SAP HCM My Timesheet Fiori 安全漏洞

SAP HCM My Timesheet Fiori is a timesheet application from SAP, Germany. A security vulnerability exists in SAP HCM My Timesheet Fiori 2.0 that stems from a lack of authorization checking and could lead to elevated privileges...

Microsoft Windows Defender 安全漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windo...

PT-2025-36842

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: A stack-based buffer overflow exists in the Windows Ancillary Function Driver for WinSock. This issue allows a locally authorized attacker to elevate...

KB5065429: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2025)

The remote Windows host is missing security update 5065429. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

KLA87443 PE vulnerabuility in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-55245 Related products Xbox-Gaming-Services CVE list CVE-2025-55245 critical Solution Install necessary updates from the KB section,...

PT-2025-36879

Name of the Vulnerable Software and Affected Versions: Windows Defender Firewall Service affected versions not specified Description: A type confusion issue exists within the Windows Defender Firewall Service. This flaw enables a locally authenticated attacker to gain elevated privileges on the...