PT-2025-42317

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An issue exists in Samba’s vfs streams xattr module where uninitialized heap memory can be written into alternate data streams. This can allow an authenticated user to read residual memory...

EUVD-2025-34389

Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...

EUVD-2025-34290

Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...

EUVD-2025-34302

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34411

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34421

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-59210

Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...

CVE-2025-59206

Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...

CVE-2025-59206

Windows Resilient File System ReFS Deduplication Service Elevation of Privilege Vulnerability...

CVE-2025-59189

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-59189

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-55687

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-55687

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-55335

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2025-48004

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-48004

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-59210

CVE-2025-59210 affects Windows Resilient File System (ReFS) Deduplication Service and enables local elevation of privileges. Base metrics show CVSS v3.1: Local, High impact (C/H), no user interaction required, with total impact on confidentiality, integrity, and availability. Microsoft’s October ...

CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-59210 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-59189

CVE-2025-59189 is a local privilege-escalation in Microsoft Brokering File System (Windows). Description: use-after-free in the Brokering File System allows a non-remote, local attacker to escalate privileges. The patched fix is included in the October 2025 Windows security update KB5066835 (OS B...