5260 matches found
CVE-2025-53726
Access of resource using incompatible type 'type confusion' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2025-53721
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-50167
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-49762
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2025-49761
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2025-49759
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2025-53779
CVE-2025-53779 is a Windows Kerberos Elevation of Privilege vulnerability. The flaw is described as a relative path traversal in Windows Kerberos that can allow an authorized attacker to elevate privileges over the network, potentially achieving domain administrator rights via the delegated Manag...
CVE-2025-53724
CVE-2025-53724 is a Windows Push Notifications vulnerability described as a type confusion that allows an authorized, locally authenticated attacker to elevate privileges. The CVE is linked to Windows Push Notifications and is rated with a base score of 7.8 (HIGH) via CVSS 3.1, with attack vector...
CVE-2025-53155
CVE-2025-53155 is a Windows Hyper-V heap-based buffer overflow that enables an authenticated, local attacker to elevate privileges. The initial entry states an local privilege escalation via Hyper-V; connected materials corroborate Windows Hyper-V involvement under the Windows security ecosystem ...
CVE-2025-53154 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-53149 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
...
CVE-2025-50168
CVE-2025-50168 is a local privilege-escalation vulnerability in Windows Win32K ICOMP caused by a type-confusion in resource access. The issue affects Win32K-ICOMP and can lead to elevated privileges for an authorized local attacker. Microsoft released August 2025 security updates that fix this vu...
CVE-2025-50161 Win32k Elevation of Privilege Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Windows StateRepository API Server file Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
Windows Hyper-V Elevation of Privilege Vulnerability
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Intel Xeon 6 Processor ๅฎๅ จ็นๅพ้ฎ้ขๆผๆด
Intel Xeon 6 Processor is a family of chips from Intel Corporation USA. A security signature issue vulnerability exists in Intel Xeon 6 Processor that stems from an improperly implemented security check that could lead to elevation of privilege...
PT-2025-32796
Name of the Vulnerable Software and Affected Versions Windows Installer versions affected versions not specified Description A weak authentication issue in Windows Installer allows an authorized attacker to elevate privileges locally. The vulnerability is related to an authentication bypass. A...
Intel AI Playground ๅฎๅ จๆผๆด
Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...
Siemens SIMATIC RTLS Locating Manager ๅฎๅ จๆผๆด
Siemens SIMATIC RTLS Locating Manager is an RTLS locating manager from Siemens, Germany. A security vulnerability exists in Siemens SIMATIC RTLS Locating Manager versions prior to V3.3, which stems from improperly protected credentials and could result in elevated privileges...