37738 matches found
CVE-2025-29976
CVE-2025-29976 affects Microsoft SharePoint (Office SharePoint Server/SharePoint Server) with an elevation-of-privilege vulnerability due to improper privilege management. An attacker with local access and low privileges could elevate privileges on the affected system, as indicated by the CVE act...
CVE-2025-29976 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2025-29973 Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
CVE-2025-29973 Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
CVE-2025-29975 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2025-29975 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2025-29973
Azure File Sync Elevation of Privilege (CVE-2025-29973): improper access control allows an authorized local attacker to escalate privileges. Affected product: Microsoft Azure File Sync. CVSS v3.1 base score 7.0 (HIGH). Remediation: patch/update from Microsoft; NCSC confirms fixes have been releas...
CVE-2025-29970 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-29970
CVE-2025-29970 is a local privilege-escalation vulnerability in the Microsoft Brokering File System caused by a use-after-free condition. An authorized attacker could exploit this to elevate privileges on the host. Public documentation identifies the affected component and the root cause as a use...
CVE-2025-29970 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-26684 Microsoft Defender Elevation of Privilege Vulnerability
...
CVE-2025-26684 Microsoft Defender Elevation of Privilege Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Microsoft Dataverse Elevation of Privilege Vulnerability
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure allows an unauthorized attacker to elevate privileges over a network...
Description of the security update for SharePoint Enterprise Server 2016: May 13, 2025 (KB5002722)
None None...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: May 13, 2025 (KB5002712)
None None...