CVE-2025-49685

CVE-2025-49685 is a local privilege-elevation vulnerability in the Microsoft Windows Search Component, caused by a use-after-free condition. The CVE is categorized with CVSS v3.1 base score 7.0 (HIGH), attack vector LOCAL, privilege required LOW, no user interaction, and affects Windows Search Co...

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows is vulnerable to a resource management error. No detailed vulnerability details are provided at this time...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

PT-2025-28627 · Microsoft · Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: An integer overflow or wraparound issue exists in the Microsoft Graphics Component. This allows an authorized attacker to execute code locally. The vulnerability may also allow...

Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

PT-2025-28618 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Microsoft Windows QoS scheduler, allowing an authorized attacker to elevate privileges locally. Recommendations: At...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Windows tcp/ip 代码问题漏洞

Microsoft Windows tcp/ip is a Tcp/Ip support service for Windows from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Windows tcp/ip. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows Server 2019...

PT-2025-28583 · Microsoft · Windows Search +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Search Component affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Windows Search Component, which allows an authorized attacker to elevate privileges locally...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. The vulnerability is exploited by attackers to perform spoofing attacks...

KLA85525 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of...

Microsoft Windows Media 安全漏洞

Microsoft Windows Media is a series of media playback and management software from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Media. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are affected: Window...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. An attacker could exploit the vulnerability to remotely execute code...

Microsoft Windows 数字错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

Microsoft Windows Event Tracing 安全漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit the...