CVE-2025-59189 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-59189 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-59206

CVE-2025-59206 affects the Windows Resilient File System (ReFS) Deduplication Service. The vulnerability is an elevation of privilege (PrivEsc) issue that can be exploited locally to obtain increased rights. The CVSS metrics in the initial entry indicate LOCAL access, high impact on confidentiali...

CVE-2025-59206 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-55687 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2025-55687 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2025-55687

CVE-2025-55687 is a local privilege-escalation vulnerability in Windows Resilient File System (ReFS) caused by a race condition when concurrent access to a shared resource occurs with improper synchronization. The impact is local elevation of privileges. Public docs (NCSC advisory and EUVD summar...

CVE-2025-55335 Windows NTFS Elevation of Privilege Vulnerability

...

CVE-2025-55335

CVE-2025-55335 : A use-after-free in Windows NTFS leading to potential local privilege escalation. The initial entry notes local privileged impact but provides no concrete patch/version or workaround. Connected MSKBs describe OS update releases addressing various issues (KB5066793, KB5066835/7/ e...

CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-48004

CVE-2025-48004 is a local privilege elevation in Microsoft Brokering File System caused by a use-after-free bug. The vulnerability allows an authenticated local attacker to escalate privileges. Public disclosures identify the affected component as the Microsoft Brokering File System, with CVSS-li...

EUVD-2025-34430

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

USN-7808-2 linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Ext4 file system; - SMB network file system; - Packet sockets; - Network traffic control; - TLS...

USN-7808-2: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Ext4 file system; - SMB network file system; - Packet sockets; - Network traffic control; - TLS...

CVE-2025-22832 Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability...

CVE-2025-22831

CVE-2025-22831 affects AMI AptioV BIOS. The vulnerability is a local, in-BIOS Out-of-bounds Write that can be triggered by an attacker with local access, causing data corruption and loss of availability. Exploitation details are not provided in the supplied documents; no patch/version remediation...

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...