146696 matches found
PT-2025-42398
Name of the Vulnerable Software and Affected Versions Veeam Agent for Microsoft Windows affected versions not specified Description The issue resides in insufficient input validation within Veeam Agent for Microsoft Windows. Successful exploitation could allow an attacker to elevate their...
KLA89278 PE vulnerability in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-59281 Related products Xbox-Gaming-Services CVE list CVE-2025-59281 critical Solution Install necessary updates from the KB section,...
PT-2025-41997
Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A use after free issue exists in the Microsoft Graphics Component. This flaw could allow an authorized attacker to elevate privileges over a network. Recommendations At t...
PT-2025-42138
Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in the Microsoft Graphics Component. This condition allows an authorized attacker to elevate privileges locally. ...
Microsoft Graphics Component 安全漏洞
Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component that can be exploited by an attacker to elevate privileges...
Microsoft Windows BitLocker 安全漏洞
Microsoft Windows BitLocker is a Microsoft Corporation USA BitLocker Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker that originates from an attacker's ability to bypass certain features by exploiting the...
Microsoft Data Sharing Service 竞争条件问题漏洞
Microsoft Data Sharing Service is a built-in data sharing service component of the Windows operating system from Microsoft Corporation USA. A competitive condition vulnerability exists in Microsoft Data Sharing Service, which can be exploited by an attacker to perform spoofing attacks...
Microsoft Windows PrintWorkflowUserSvc 资源管理错误漏洞
Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. A resource management error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc, which stems from an attacker's ability to elevate privilege...
Microsoft Defender 安全漏洞
Microsoft Defender is a threat protection software from Microsoft USA. Microsoft Defender for Linux has a security vulnerability that can be exploited by attackers to cause a denial of service on the system...
PT-2025-42097
Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization within the Microsoft Graphics Component. This allows an authoriz...
PT-2025-42117
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel, potentially allowing a local attacker to disclose information. Recommendations At the moment, there is no...
Microsoft Network Connection Status Indicator 访问控制错误漏洞
Microsoft Network Connection Status Indicator is a built-in network connection status component of a Windows operating system from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Network Connection Status Indicator, which can be exploited by an attacker to...
Microsoft DWM Core Library 安全漏洞
Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft DWM Core Library, which can be exploited by an attacker to gain elevated privileges...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Local Session Manager, which can be exploited by an attacker to cause a denial of service on the system...
PT-2025-41974
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description An improper access control issue exists in Microsoft PowerShell. This allows an authorized attacker with local access to elevate privileges. The flaw enables privilege escalation...
Microsoft Windows 安全漏洞
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability that can be exploited by attackers to remotely execute code...
Microsoft NTLM 信息泄露漏洞
Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. An information disclosure vulnerability exists in Microsoft NTLM, which can be exploited by an attacker to perform spoofing attacks...
Microsoft Azure Monitor 代码问题漏洞
Microsoft Azure Monitor is a newer observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A code issue vulnerability exists in Microsoft Azure Monitor that stems from an attacker's ability to elevate privileges by...
Microsoft Windows Bluetooth Service 资源管理错误漏洞
Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service, which stems from an attacker's ability to elevate privileges by exploiting the vulnerability...
Microsoft Xbox Gaming Services 后置链接漏洞
Microsoft Xbox Gaming Services is an Xbox-related gaming service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Xbox Gaming Services, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...