CVE-2025-43079

CVE-2025-43079 concerns Qualys Cloud Agent where the bundled uninstall script qagent_uninstall.sh (Mac/Linux) executes multiple system commands without absolute paths and without sanitizing $PATH. The root cause is reliance on manipulated PATH, enabling a privileged user (root/sudo) with elevated...

CVE-2025-43079 Local Privilege Escalation via qagent_uninstall.sh Qualys Cloud Agents

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...

CVE-2025-46430

Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2025-44046

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...

EUVD-2025-44045

In JetBrains dotTrace before 2025.2.5 local privilege escalation possible via race condition...

CVE-2025-64457

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition...

CVE-2025-64457

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition...

CVE-2025-64457

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition...

CVE-2025-64457

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition...

CVE-2025-64457

JetBrains products affected: ReSharper, Rider, and dotTrace (before 2025.2.5). The issue is a local privilege escalation caused by a race condition in these tools. The vulnerability allows an attacker with local access to potentially escalate privileges, as described in multiple sources (CVE-2025...

CVE-2025-64456

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...

PT-2025-46149

Name of the Vulnerable Software and Affected Versions JetBrains dotTrace versions prior to 2025.2.5 Description A local privilege escalation can occur due to a race condition in JetBrains dotTrace. This issue allows for potential unauthorized access and control within the system. Recommendations...

Microsoft Graphics Component Resource Management Error Vulnerability (CNVD-2025-29346)

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Graphics Component, which stems from reuse after release and can be exploited by an attacker to cause a local elevation of privilege...

Autodesk On-Demand Install Services adsk_IPCUpdaterChannel Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Autodesk On-Demand Install Services. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Microsoft Windows Bluetooth Service Resource Management Error Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service that stems from a contention condition due to improper synchronization of shared resources, which can be...

JetBrains ReSharper 数据伪造问题漏洞

JetBrains ReSharper is a Visual Studio extension for .NET development from the Czech company JetBrains. The program is mainly used for code quality analysis, code error alerts and other functions. A data forgery issue vulnerability exists in JetBrains ReSharper versions prior to 2025.2.4, which...

containerd affected by a local privilege escalation via wide permissions on CRI directory

...

EUVD-2025-38331

Insecure Deserialization pickle in pdfminer.six CMap Loader — Local Privesc...

CVE-2025-10885

A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM due to an insufficient validation of loaded binaries. An attacker with local and low-privilege access could exploit this to execute code as SYSTEM...

CVE-2025-9338

A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security...