KLA80105 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges...

Microsoft Windows Storage Link Following Vulnerability

Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable...

CVE-2019-3593

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

PT-2025-24329

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to June 2025 Description An issue exists in the WebDAV module where external control of file names or paths in Internet Shortcut Files allows an unauthorized remote attacker to execute arbitrary code. The flaw...

The Bug Report - January 2025 Edition

The Bug Report - January 2025 Edition By Jonathan Omakun · January 30, 2025 Why am I here? Ah, January—the month of resolutions, regrets, and, apparently, really bad code. While you’re trying to get back to the gym or cut down on caffeine, attackers have been busy exploiting vulnerabilities faste...

Microsoft Windows HTML Platforms Security Feature Bypass Vulnerability

Microsoft Windows HTML Platforms is a technology for rendering and executing HTML content on the Windows operating system. A security feature bypass vulnerability exists in Microsoft Windows HTML Platforms, which is caused by a security feature bypass vulnerability in the HTML Platforms component...

Unspecified Vulnerability in Microsoft Windows Telephony Server (CNVD-2025-02538)

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...

Unspecified Vulnerability in Microsoft Windows Secure Boot (CNVD-2025-02537)

Microsoft Windows Secure Boot is a secure boot from Microsoft USA. A security vulnerability exists in Microsoft Windows Secure Boot. An attacker could exploit the vulnerability to bypass certain features...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02835)

Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...

Microsoft Windows BitLocker Information Disclosure Vulnerability (CNVD-2025-02534)

Microsoft Windows BitLocker is a Microsoft USA BitLocker ensures secure backup of recovery keys before activating the protection. A security vulnerability exists in Microsoft Windows BitLocker. An attacker could exploit the vulnerability to obtain sensitive information...

Microsoft Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V NT Kernel Integration VSP, which can be exploited by an attacker to gain elevated privileges on a system...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02836)

Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...

Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-02539)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows upnphost.dll. An attacker could exploit this vulnerability to cause a denial of service on the system...

Microsoft Windows Kernel Log Message Disclosure Vulnerability (CNVD-2025-02535)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. A security vulnerability exists in Microsoft Windows Kernel Memory. An attacker exploiting this vulnerability could gain access to sensitive information...

Microsoft Windows Hyper-V NT Kernel Integration VSP elevation of privilege vulnerability (CNVD-2025-05240)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V NT Kernel Integration VSP, which can be exploited by an attacker to gain elevated privileges on a system...

KLA79080 PE vulnerability in Microsoft Windows

An elevation of privilege vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-21325 Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-10 Microsoft-Windows-11 CVE list CVE-2025-213...

Microsoft Windows Multiple Vulnerabilities (KB5049993)

This host is missing an important security update according to Microsoft KB5049993 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5050021)

This host is missing an important security update according to Microsoft KB5050021 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5050013)

This host is missing a critical security update according to Microsoft KB5050013 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...