Lucene search
+L

36989 matches found

CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•12 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that can be exploited by an attacker to cause local elevation of privilege...

7.8CVSS5.8AI score0.00078EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•18 views

PT-2025-50709

In GetHostAddress of gxp buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00095EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•14 views

PT-2025-50715

Name of the Vulnerable Software and Affected Versions Apache affected versions not specified Description A memory corruption issue exists due to uninitialized data within the trusty ffa mem reclaim function in shared-mem-smcall.c. This could allow for local escalation of privilege without requiri...

7.8CVSS6.7AI score0.00078EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/11 12:00 a.m.•0 views

CVE-2025-36919: Double Free

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00078EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/11 12:00 a.m.•16 views

(0Day) PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.6CVSS7.6AI score0.0033EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/11 12:00 a.m.•17 views

(0Day) Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration o...

7.8CVSS7.5AI score0.00164EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•16 views

CVE-2025-34396

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAINFY.DLL from its application directo without sufficient integrity validation or secure search order. If the...

8.5CVSS7.6AI score0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•11 views

CVE-2025-64661

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

7.8CVSS7AI score0.0025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•11 views

CVE-2025-55233

Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS6.8AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•7 views

CVE-2025-64679

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•11 views

CVE-2025-62455

Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00473EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•9 views

CVE-2025-62462

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS7AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•10 views

CVE-2025-64680

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.00374EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•11 views

CVE-2025-62467

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•11 views

CVE-2025-62221

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.02505EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•10 views

CVE-2025-62458

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.00657EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•13 views

CVE-2025-62470

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.00507EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•10 views

CVE-2025-62454

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.02312EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•8 views

CVE-2025-62571

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•11 views

CVE-2025-62466

Null pointer dereference in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00402EPSS
SaveExploits0References1
Rows per page
Query Builder