CVE-2025-4767

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function testcustomtool of the file introspect/backend/integrationroutes.py of the component Test Endpoint. The manipulation of the argument inputmodel leads to code injectio...

CVE-2025-4740

CVE-2025-4740 affects BeamCtrl Airiana up to v11.0, with a deserialization vulnerability in the coef file leading to a local attack. Exploit disclosed; impact details in CVSS metrics indicate partial confidentiality/integrity/availability. Public fixes are not documented in the provided sources; ...

CVE-2024-57096

An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...

PT-2025-21598 · Unknown · Beamctrl Airiana

Name of the Vulnerable Software and Affected Versions: BeamCtrl Airiana versions up to 11.0 Description: A vulnerability was found in BeamCtrl Airiana, affecting unknown code of the file coef. The manipulation leads to deserialization. The attack needs to be approached locally. Recommendations: F...

CVE-2025-27488

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally...

CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-32706

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-29970

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2024-57096

An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...

PT-2025-21228 · Kingsoft · Wps Office

Name of the Vulnerable Software and Affected Versions: WPS Office versions prior to 19302 Description: The issue allows a local attacker to obtain sensitive information via a crafted file. Recommendations: For versions prior to 19302, update to version 19302 or later to resolve the issue...

CVE-2025-4540

A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...

CVE-2025-32706

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2025-29838

Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27468

Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2025-27468

Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2025-26684

CVE-2025-26684 is a Microsoft Defender Elevation of Privilege vulnerability in Defender for Endpoint where external control of a file name or path enables a locally authenticated attacker with high privileges to elevate to a higher privilege level. The CVSSv3.1 base score is 6.7 (Medium) with loc...

c-ares: c-ares has a use-after-free in read_answers()

A flaw was found in c-ares. This vulnerability allows a remote or local attacker to cause a use-after-free, potentially leading to application-level denial of service or other unexpected behavior via manipulation of DNS responses or network conditions during query processing...

CVE-2025-44039

CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console. This vulnerability allows local attackers to connect to the UART port via a serial connection, read all boot sequence, and revealing internal system details and sensitive...