Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight Web application server from the American Apache Apache Foundation. It is used to implement support for Servlets and JavaServer Page JSP. A security vulnerability exists in Apache Tomcat that stems from the installer not specifying the full path when using icacls.exe...

The vulnerability of the Milestone XProtect software installer allows a intruder to disclose protected information.

The vulnerability of the Milestone XProtect video surveillance software installer is related to the lack of data encryption measures. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-33075 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-33075 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-33075

CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...

CVE-2025-32714 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-32714

CVE-2025-32714 maps to an improper access control in Windows Installer enabling local privilege escalation for an authenticated attacker. Connected sources confirm Windows Installer as the vulnerable component and describe the impact as obtaining elevated privileges locally. Remediation is via Mi...

CVE-2025-32714 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...