Windows Shell Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Storage VSP Driver Elevation of Privilege Vulnerability

Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

Windows File Explorer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally...

Windows Client-Side Caching Elevation of Privilege Vulnerability

Null pointer dereference in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Windows File Explorer Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

Application Information Service Elevation of Privilege Vulnerability

Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally...

PT-2025-50167

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An issue exists in Windows Projected File System that could allow a locally authenticated attacker to gain elevated privileges. The issue is due to an integer overflow o...

PT-2025-50160

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description The issue involves multiple local privilege escalation flaws within Microsoft Windows. A heap-based buffer overflow exists in Windows Win32K - GRFX, potentially allowing an...

PT-2025-50196

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A flaw exists in Windows Shell related to concurrent execution using a shared resource with improper synchronization, creating a race condition. This can allow a locally authenticated...

PT-2025-50135

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an unsafe DLL loading issue that could allow a local attacker to execute arbitrary code. The MailEnable administrative executable attempts to load MEAINFY.D...

PT-2025-50162

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A buffer over-read exists in Windows Projected File System. A successful exploit could allow an authorized attacker to elevate privileges locally. This issue allows...

Microsoft Windows win32kbase Out-Of-Bounds Access Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kbase...

Schneider Electric PowerChute Serial Shutdown Directory Traversal Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric PowerChute Serial Shutdown. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the...

PT-2025-50203

Name of the Vulnerable Software and Affected Versions Storvsp.sys Driver affected versions not specified Description An improper access control issue exists within the Storvsp.sys Driver. This allows a local attacker who is already authorized to elevate their privileges on the system. The issue...

PT-2025-50152

Name of the Vulnerable Software and Affected Versions Windows Storage VSP Driver affected versions not specified Description A security issue exists in the Windows Storage VSP Driver that allows a local attacker to gain elevated privileges. The problem stems from a lack of proper authentication f...

PT-2025-50155

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 10 and later Description A use-after-free issue exists in the Windows Cloud Files Mini Filter Driver, specifically within the cldflt.sys driver used by services such as Microsoft OneDrive. A use-after-free is a...