CVE-2025-55697

Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally...

CVE-2025-48004

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-53782

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34362

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-34270

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

EUVD-2025-34271

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

EUVD-2025-34394

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

EUVD-2025-34304

Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2025-34301

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

EUVD-2025-34318

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

EUVD-2025-34406

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

EUVD-2025-34317

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

EUVD-2025-34332

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

EUVD-2025-34411

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34329

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-59289

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59275

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2025-59253

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

CVE-2025-59229

Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally...

CVE-2025-59213

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network...