Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

EUVD-2025-60990

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability...

CVE-2025-42895 Code Injection vulnerability in SAP HANA JDBC Client

Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability o...

CVE-2025-42888

CVE-2025-42888 describes an information disclosure in SAP GUI for Windows where a highly privileged user on the affected client PC can locally access sensitive information stored in process memory during runtime. The impact is confined to confidentiality; no integrity/availability impact is indic...

MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MSP360 Free Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an administrator ...

PT-2025-46396

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A protection mechanism failure exists in some IntelR CIP software. This issue, occurring within Ring 3: User Applications, may allow an unprivileged software adversary with ...

PT-2025-46405

Name of the Vulnerable Software and Affected Versions IntelR Processor Identification Utility versions prior to 8.0.43 Description The IntelR Processor Identification Utility, before version 8.0.43, has incorrect default permissions within Ring 3, potentially allowing an escalation of privilege. ...

PT-2025-46451

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An improper access control issue exists in Microsoft Configuration Manager. This allows an authorized attacker to elevate privileges locally. Recommendations At the...

PT-2025-46466

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Remote Desktop where an untrusted pointer dereference can occur. A local attacker who successfully exploits this may be able to gain elevated privileges...

PT-2025-46479

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Administrator Protection related to an untrusted search path. This allows an authorized attacker to elevate privileges locally. Approximately 1 billion devices...

PT-2025-46429

Name of the Vulnerable Software and Affected Versions Intel Arc B-series GPUs affected versions not specified Description A configuration issue with default permissions in some firmware for Intel Arc B-series GPUs within Ring 1 device drivers may allow an attacker to gain elevated privileges. A...

ASUS Armoury Crate Memory Buffer Operation Improperly Limited Vulnerability

ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from an improperly restricted memory buffer manipulation vulnerability that can be exploited by an attacker to cause a local elevation...

PT-2025-46425

Name of the Vulnerable Software and Affected Versions IntelR Processor Identification Utility versions prior to 8.0.43 Description An uncontrolled search path exists in the IntelR Processor Identification Utility before version 8.0.43. This issue, occurring within Ring 3 User Applications, may...

PT-2025-46456

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...

PT-2025-46506

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use after free issue exists in the Windows Ancillary Function Driver for WinSock. This flaw could allow an authorized attacker to gain elevated...

Siemens Spectrum Power 安全漏洞

Siemens Spectrum Power is an energy management system from Siemens Germany. A security vulnerability exists in Siemens Spectrum Power 4 versions prior to V4.70 SP12 Update 2, which originates from an exposed debugging interface on the local host and may result in local elevation of privilege...

PT-2025-46511

Name of the Vulnerable Software and Affected Versions Microsoft Wireless Provisioning System affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate...

PT-2025-46458

Name of the Vulnerable Software and Affected Versions Windows Speech affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization in Windows Speech. This allows an authorized attacker to elevate privileges...

Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25042)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25042 advisory. - Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow ...

PT-2025-46508

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A race condition exists in the Windows Kernel due to improper synchronization when multiple threads concurrently access shared kernel resources. This flaw allows a local authenticat...