CVE-2025-24987

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

CVE-2025-24055

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2025-24988

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

CVE-2025-24988

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

CVE-2025-24987

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2025-24055

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...

CVE-2025-24984

CVE-2025-24984 is an NTFS information-disclosure vulnerability in Windows NTFS caused by insertion of sensitive data into a log file, potentially leaking heap memory when a physical medium is mounted or accessed. CVSS v3.1 vector: AV=Physical/AC=L/PR=None/UI=None/S=Unchanged/C=High/I=None/A=None;...

CVE-2025-24987

CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...

CVE-2025-24988

The CVE-2025-24988 entry affects the Windows USB Video Driver, with an out-of-bounds read vulnerability that enables an authorized attacker with physical access to elevate privileges. Connected sources confirm this CVE name and context and indicate Microsoft has released updates to fix Windows US...

Windows USB Video Class System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

Windows NTFS Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

KLA81545 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface, cause denial of service. Below is a complete list of...

PT-2025-10807 · Microsoft · Windows Usb Video Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Video Driver affected versions not specified Description: The issue is an out-of-bounds read that allows an authorized attacker to disclose information, requiring a physical attack. Recommendations: At the moment, there is no...

CVE-2025-24984

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2025-10829 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue allows an unauthorized attacker to disclose sensitive information through a physical attack by inserting sensitive information into a log file in Windows NTFS. This...

CVE-2025-2119 Thinkware Car Dashcam F800 Pro Device Registration default credentials

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...