PT-2025-42129

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description An issue with weak authentication in Microsoft Exchange Server could allow an authorized attacker to elevate privileges on a network. Recommendations At the moment, there is...

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM that originates from an attacker exploiting the vulnerability to perform a spoofing...

Microsoft Azure 安全漏洞

Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. Microsoft Azure has a security vulnerability that can be exploited by an attacker who can elevate privileges...

Microsoft Inbox COM Objects 资源管理错误漏洞

Microsoft Inbox COM Objects is a built-in COM component for Windows operating systems from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to remotely execute code...

Microsoft Configuration Manager SQL注入漏洞

Microsoft Configuration Manager is a Microsoft solution for managing computers and servers within an organization that helps IT departments keep software up-to-date, set configuration and security policies, and monitor system status. Microsoft Configuration Manager suffers from a SQL injection...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel, which stems from a vulnerability that can be exploited by an attacker to elevate privileges...

Microsoft Windows Kernel 信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to obtain sensitive information...

Microsoft Configuration Manager SQL注入漏洞

Microsoft Configuration Manager is a Microsoft solution for managing computers and servers within an organization that helps IT departments keep software up-to-date, set configuration and security policies, and monitor system status. Microsoft Configuration Manager suffers from a SQL injection...

KLA89274 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Microsoft Defender for...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Agere Modem Driver, which originates from a vulnerability that can be exploited by an attacker to elevate privileges...

Microsoft Office Visio 资源管理错误漏洞

Microsoft Office Visio is a software responsible for drawing flowcharts and schematics in the Office software family of Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Office Visio, which originates from a vulnerability that can be exploited by an attacker...

PT-2025-42119

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...

PT-2025-42110

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Excel affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not...

PT-2025-41916

Name of the Vulnerable Software and Affected Versions FTLinx versions affected versions not specified Description A security issue exists in the x86 Microsoft Installer MSI used with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting...

Microsoft Storport.sys Driver 安全漏洞

Microsoft Storport.sys Driver is a storage port driver component of the Windows operating system kernel from Microsoft Corporation USA. A security vulnerability exists in Microsoft Storport.sys Driver, which originates from a vulnerability that can be exploited by an attacker to elevate privilege...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Local Session Manager, which can be exploited by an attacker to cause a denial of service on the system...

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. Microsoft Windows suffers from an Access Control Error vulnerability that originates from an attacker's ability to elevate privileges by exploiting the vulnerability...

Microsoft Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel, which can be exploited by attackers to obtain sensitive information...

PT-2025-42051

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue involving improper validation of input types exists in Microsoft Windows. This can allow a local attacker to gain elevated privileges. Recommendations At the moment, there ...

Microsoft Playwright 数据伪造问题漏洞

Microsoft Playwright is an automation framework from Microsoft Corporation USA. Microsoft Playwright suffers from a Data Forgery Issue vulnerability, which can be exploited by an attacker to perform spoofing attacks...