KB5065425: Windows Server version 23H2 Security Update (September 2025)

The remote Windows host is missing security update 5065425. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

Microsoft Xbox Gaming Services < 30.104.13001.0 Elevation of Privilege (September 2025)

The version of Microsoft Xbox Gaming Services on the remote Windows host is prior to 30.104.13001.0. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges...

KLA87445 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of...

Google Android elevation of privilege vulnerability (CNVD-2025-21350)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to an obfuscated agent in the system's user interface. An attacker can exploit the vulnerability to gain elevated privileges on the system...

PT-2025-36824

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An untrusted pointer dereference in Windows Desktop Window Manager DWM can allow a locally authenticated attacker to gain elevated privileges. This issue allows attackers to affect the...

PT-2025-36860

Name of the Vulnerable Software and Affected Versions: Local Security Authority Subsystem Service affected versions not specified Description: An elevation-of-privilege vulnerability allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer versi...

PT-2025-36817

Name of the Vulnerable Software and Affected Versions: Azure Windows Virtual Machine Agent affected versions not specified Description: An improper access control issue exists in the Azure Windows Virtual Machine Agent. This allows an authorized attacker to elevate privileges locally...

KB5065427: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2025)

The remote Windows host is missing security update 5065427. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

Microsoft AutoUpdate for macOS < 4.80 Elevation of Privilege (September 2025)

The version of Microsoft AutoUpdate installed on the remote macOS ost is prior to 4.80. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate...

CVE-2025-43722

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges...

CVE-2025-43722

CVE-2025-43722 affects Dell PowerScale OneFS versions prior to 9.12.0.0 and is due to improper privilege management. A high-privilege attacker with local access could potentially escalate privileges. The issue is documented across multiple sources: affected product is Dell PowerScale OneFS; root ...

Unspecified Vulnerability in NVIDIA DOCA (CNVD-2025-21180)

NVIDIA DOCA is a software framework from NVIDIA. NVIDIA DOCA has a security vulnerability that can be exploited by attackers to cause elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2025-23040)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a clickjacking/overwriting attack in the maybeShowDialog function in ControlsSettingsDialogManager.kt that results in ControlsSettingsTialog...

Google Android elevation of privilege vulnerability (CNVD-2025-26879)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a path traversal error in multiple locations, which can be exploited by an attacker to gain elevated privileges on the system...

Google Android elevation of privilege vulnerability (CNVD-2025-24495)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher privileges on the system...

Google Android elevation of privilege vulnerability (CNVD-2025-26883)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to incorrect input validation in the getCallingAppName function in Shared.java, which results in a user granting file access via deceptive text in the...

Google Android Elevation of Privilege Vulnerability

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from an elevation of privilege vulnerability that stems from...

Google Pixel elevation of privilege vulnerability (CNVD-2025-25480)

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker that may lead to physical elevation of privileges...

Google Android elevation of privilege vulnerability (CNVD-2025-26730)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Google Android Privilege Bypass Vulnerability

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a privilege bypass vulnerability that can be exploited by ...