CVE-2025-49759

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-49762

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-53788 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

CVE-2025-53788 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

CVE-2025-53789 Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

CVE-2025-53789 Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

CVE-2025-53779

CVE-2025-53779 is a Windows Kerberos Elevation of Privilege vulnerability. The flaw is described as a relative path traversal in Windows Kerberos that can allow an authorized attacker to elevate privileges over the network, potentially achieving domain administrator rights via the delegated Manag...

CVE-2025-53779 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2025-53779 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2025-50155 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

CVE-2025-53778 Windows NTLM Elevation of Privilege Vulnerability

...

CVE-2025-53778 Windows NTLM Elevation of Privilege Vulnerability

...

CVE-2025-50155 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

CVE-2025-47954 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2025-47954 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2025-53726 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

CVE-2025-53726 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

CVE-2025-53725 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

CVE-2025-53724 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

CVE-2025-53724

CVE-2025-53724 is a Windows Push Notifications vulnerability described as a type confusion that allows an authorized, locally authenticated attacker to elevate privileges. The CVE is linked to Windows Push Notifications and is rated with a base score of 7.8 (HIGH) via CVSS 3.1, with attack vector...