CVE-2025-53142

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-54867 Youki Symlink Following Vulnerability

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1979)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : RDMA/core: Silence oversized kvmalloc warningCVE-2025-37867 igb: revert rtnllock that causes deadlockCVE-2023-53060 bnxten: Avoid order-5 memory...

Ubuntu 14.04 LTS / 16.04 LTS : cifs-utils vulnerabilities (USN-7688-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7688-1 advisory. Aurlien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly...

Aide security vulnerabilities

Aide is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. A security vulnerability exists in versions prior to Aide 0.19.2, which stems from improper output neutralization and could lead to bypassing detection...

USN-7685-5: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file syste...

Ubuntu: Security Advisory (USN-7688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-53142

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-53142

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-50158

Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-50158

Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-53142 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-53142 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-53142

CVE-2025-53142 is a local privilege escalation in the Microsoft Brokering File System caused by a use-after-free condition. The issue affects Windows where an authorized attacker can elevate privileges locally. Microsoft has released fixes as part of the August 2025 updates (e.g., KB5064010 and r...

CVE-2025-50158

CVE-2025-50158 is a TOCTOU race condition in Windows NTFS that could allow a local attacker to disclose information. The description confirms the vulnerability is a local information-disclosure flaw affecting NTFS. Connected sources list CVE-2025-50158 under Windows NTFS with an impact of Access ...

CVE-2025-50158 Windows NTFS Information Disclosure Vulnerability

...

CVE-2025-50158 Windows NTFS Information Disclosure Vulnerability

...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Windows NTFS Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...

PT-2025-32781

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: A time-of-check time-of-use TOCTOU race condition exists in Windows NTFS, potentially allowing an unauthorized attacker to disclose information locally. Recommendations: At the moment,...