37666 matches found
CVE-2025-27689
Dell iDRAC Tools, versions prior to 11.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-27689
Dell iDRAC Tools versions prior to 11.3.0.0 are affected by an Improper Access Control vulnerability that could allow a low-privilege, locally authenticated attacker to escalate privileges. The cited fix is to update to 11.3.0.0 or later (per PT-2025-25355), with corroborating references noting t...
CVE-2025-47955
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-33070
Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network...
PT-2025-25355 · Dell · Idrac Tools
Name of the Vulnerable Software and Affected Versions: Dell iDRAC Tools versions prior to 11.3.0.0 Description: The issue is related to an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
Patch Tuesday, June 2025 Edition
Microsoft today released security updates to fix at least 67 vulnerabilities in its Windows operating systems and software. Redmond warns that one of the flaws is already under active attack, and that software blueprints showing how to exploit a pervasive Windows bug patched this month are now...
WordPress Golo plugin elevation of privilege vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An elevation of privilege vulnerability exists in WordPress Golo plugin that stems from not properly authenticating a user and can be exploited by an attacker to cause an...
CVE-2025-46889
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized elevated access...
June Microsoft Patch Tuesday
June Microsoft Patch Tuesday. A total of 81 vulnerabilities, roughly the same as in May. Among them, 15 vulnerabilities were added between the May and June MSPT. There are 3 vulnerabilities with signs of exploitation in the wild: RCE - WEBDAV/Internet Shortcut Files CVE-2025-33053. For successful...
Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities
Update 6/12/2025: Microsoft released an additional CVE CVE-2025-32717 . Details and SIDs have been reflected to include this additional vulnerability. Microsoft has released its monthly security update for June 2025, which includes 66 vulnerabilities affecting a range of products, including 10 th...
Microsoft and Adobe Patch Tuesday, June 2025 Security Update Review
Microsoft's June 2025 Patch Tuesday has landed, addressing a new batch of critical and important vulnerabilities across Windows and enterprise products. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for June 2025 In this month's Patch Tuesday, June 2025 edition,...
CVE-2025-47955
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-32721
Improper link resolution before file access 'link following' in Windows Recovery Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32721
Improper link resolution before file access 'link following' in Windows Recovery Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32716
Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2025-32714
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-32713
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-47968
CVE-2025-47968 is a local privilege-escalation vulnerability in Microsoft AutoUpdate (MAU) due to improper input validation. Affected product: MAU (Mac). The CVSS v3.1 metrics indicate Local attack vector, Low attack complexity, Low privileges required, but High impact on confidentiality, integri...
