Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows USB Video Class System Driver Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally...

Windows Search Service Denial of Service Vulnerability

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally...

Data Sharing Service Spoofing Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Graphics Component Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to deny service locally...

Windows Health and Optimized Experiences Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

Windows Hello Security Feature Bypass Vulnerability

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally...

Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...

PT-2025-42091

Name of the Vulnerable Software and Affected Versions Software Protection Platform affected versions not specified Description Improper access control in the Software Protection Platform SPP, specifically within the Sppsvc.exe service, allows an authorized attacker to elevate privileges locally...

PT-2025-41922

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description APTIOV BIOS contains a flaw that allows a local attacker to trigger an Out-of-bounds Write. Successful exploitation of this issue may result in data corruption and a loss of system availabilit...

PT-2025-42029

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An improper input validation issue exists in the Windows Kernel. This allows a local, unauthorized attacker to disclose information. Recommendations At the moment, there is no...

PT-2025-42087

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization within the Microsoft Graphics Component. This allows a local...

PT-2025-42027

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows Device Association Broker service where an untrusted pointer dereference can occur. This allows an authorized attacker to gain elevated privileges on a local...