21215 matches found
CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49694
CVE-2025-49694 – Microsoft Brokering File System Elevation of Privilege. Description confirms a null pointer dereference that enables an authorized, local attacker to gain elevated privileges. CVSS v3.1 base score 7.8 ( HIGH ); attack vector LOCAL, privileges required LOW, user interaction NONE, ...
CVE-2025-49677
CVE-2025-49677 describes a use-after-free in Microsoft Brokering File System that enables local privilege escalation for an authorized user. The vulnerability is demonstrated by a PoC that yields an interactive SYSTEM shell via a scheduled task abuse, indicating a local attack vector with high im...
Microsoft Brokering File System Elevation of Privilege Vulnerability
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
Microsoft Brokering File System Elevation of Privilege Vulnerability
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
PT-2025-33776
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF vulnerability in the f2fs sync inode meta function. This issue was identified by syzkaller and results from improper handling of memory,...
PT-2025-28745 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is related to an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this problem by injecting crafted XML or XPath...
PT-2025-28752 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: ColdFusion is susceptible to a Server-Side Request Forgery SSRF issue that may allow arbitrary file system read. A high-privilege authenticated attacker can exploit this...
CVE-2025-49538: XML Injection (aka Blind XPath Injection)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this issue by injecting crafted XML or XPath queries to access unauthorized files or lead to denial of service. Exploitati...
Microsoft Brokering File System Resource Management Vulnerability
Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected: Windows...
Microsoft Brokering File System Resource Management Vulnerability
Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Brokering File System Code Issues and Vulnerabilities
Microsoft Brokering File System is a file system from the American company Microsoft. A security vulnerability exists in Microsoft Brokering File System. An attacker could exploit the vulnerability to elevate privileges...
PT-2025-28591 · Microsoft · Brokering File System +1
Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to a null pointer dereference in Microsoft Brokering File System, which allows an authorized attacker to elevate privileges locally...
PT-2025-28590 · Microsoft · Brokering File System +1
Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to a double free in the Microsoft Brokering File System, which allows an authorized attacker to elevate privileges locally. Recommendations: At...
CVE-2025-49545: Server-Side Request Forgery (SSRF)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of URLs. Exploitation...
CVE-2025-49693: Double Free
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...