CVE-2025-36922

A use after free vulnerability in the bigo_map of bigo_iommu.c allows for potential information disclosure . This flaw could lead to a local elevation of privilege at the OS Kernel level, requiring System execution privileges . The vulnerability affects the gChip component on Google Pixel devices...

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2025-202863

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36919

The AoC component in Google Pixel devices is vulnerable to a double free flaw in aocc_read of aoc_channel_dev.c caused by improper locking . This vulnerability can lead to local elevation of privilege without requiring additional execution privileges or user interaction. Remediation is provided i...

CVE-2025-36918

A high-severity Elevation of Privilege (EoP) vulnerability exists in the AoC component of Google Pixel devices. The flaw is caused by an out-of-bounds read in aoc_service_read_message within aoc_ipc_core.c due to improper input validation. An attacker with System execution privileges could exploi...

CVE-2025-36918

In aocservicereadmessage of aocipccore.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36916

A double fetch vulnerability exists in PrepareWorkloadBuffers of gxp_main_actor.cc due to a race condition . This flaw could allow for local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The vulnerability specifically affects the TPU componen...

CVE-2025-36916

In PrepareWorkloadBuffers of gxpmainactor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-11772

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

CVE-2025-64669

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2025-64669

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally...

EUVD-2025-202725

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2025-64995

A privilege escalation vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers, with local access to the devic...

CVE-2025-7073

A local privilege escalation vulnerability in Bitdefender Total Security 27.0.46.231 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory C:\ProgramData\Atc\Feedback without proper symbolic link validation,...

PT-2025-50765

Name of the Vulnerable Software and Affected Versions AnyDesk versions 7.0.15 and 9.0.1 Description AnyDesk versions 7.0.15 and 9.0.1 have an unquoted service path configuration. This allows local, non-privileged users to potentially run code with SYSTEM-level privileges. An attacker can exploit...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in WAVESsenddatatodsp in libaocwaves.c, which could lead to local elevation of privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a competing condition in PrepareWorkloadBuffers in gxpmainactor.cc, which could lead to local elevation of privilege...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from memory corruption due to uninitialized data, which could lead to local elevation of privilege...

EulerOS 2.0 SP11 : udisks2 (EulerOS-SA-2025-2472)

According to the versions of the udisks2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the...