16145 matches found
CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability
...
CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability
...
CVE-2025-26633
CVE-2025-26633 is a local-privilege-escalation in Microsoft Management Console (MMC) caused by improper neutralization in how MMC loads language-twin .msc files. A malicious “evil twin” .msc in a language directory can execute payloads with the user’s privileges when a user opens a legitimate MMC...
CVE-2025-24061 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2025-21247 MapUrlToZone Security Feature Bypass Vulnerability
...
CVE-2025-21247
CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...
CVE-2025-21247 MapUrlToZone Security Feature Bypass Vulnerability
...
MapUrlToZone Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...
Microsoft Management Console Security Feature Bypass Vulnerability
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-27395
A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and...
PT-2025-10797 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the improper resolution of path equivalence in Windows MapUrlToZone, which allows an unauthorized attacker to bypass a security feature over a network. This could...
CVE-2025-21247: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...
VulnCheck KEV: CVE-2025-26633
Microsoft Windows Management Console MMC contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally...
Kibana 8.x < 8.7.1 Multiples Vulnerabilities
According to its self-reported version number, the Kibana application running on the remote host is 8.x prior to 8.7.1. It is, therefore, affected by multiple vulnerabilities. - An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to...
CVE-2025-26633: Improper Neutralization
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...
Concrete CMS 输入验证错误漏洞
Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. An input validation error vulnerability exists in Concrete CMS versions 9.0.0 through 9.3.9, which stems from a lack of input cleanup in the Add Folder feature and could lead to a malicious...
dccp: Fix memory leak in dccp_feat_change_recv
...
microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware
An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...
microcode_ctl: Improper input validation in XmlCli feature for UEFI firmware
An improper input validation flaw was found in the XmlCli feature for UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...