CVE-2025-64661

CVE-2025-64661 – Windows Shell Elevation of Privilege is supported by connected sources. The vulnerability involves a race condition in concurrent execution using a shared resource in Windows Shell, allowing an authorized local attacker to elevate privileges. Connected documents confirm impact as...

EUVD-2025-202222

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-64673

CVE-2025-64673 is a Windows Storage VSP Driver elevation-of-privilege vulnerability in the Storvsp.sys component. The connected sources confirm improper access control in Storvsp.sys that could allow an authorized, local attacker with low privileges to obtain higher privileges. The CVSS v3.1 base...

EUVD-2025-202236

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-62472 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2025-62454 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 146 and Firefox...

PT-2025-50169

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A flaw exists in the Microsoft Brokering File System related to concurrent execution using a shared resource with improper synchronization, creating a race condition...

PT-2025-50194

Name of the Vulnerable Software and Affected Versions Application Information Services affected versions not specified Description An out-of-bounds read issue exists in Application Information Services, potentially allowing a local attacker to gain elevated privileges. The issue allows attackers ...

PT-2025-50155

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 10 and later Description A use-after-free issue exists in the Windows Cloud Files Mini Filter Driver, specifically within the cldflt.sys driver used by services such as Microsoft OneDrive. A use-after-free is a...

PT-2025-50112

Name of the Vulnerable Software and Affected Versions Dell Encryption versions prior to 11.12.1 Description Dell Encryption contains an Improper Link Resolution Before File Access 'Link Following' issue. A local malicious user could potentially exploit this, leading to Elevation of privileges...

Microsoft Message Queuing 输入验证错误漏洞

Microsoft Message Queuing is a Microsoft Corporation USA solution for implementing asynchronous and synchronous scenarios that require high performance. An input validation error vulnerability exists in Microsoft Message Queuing. An attacker could exploit the vulnerability to elevate privileges...

PT-2025-50161

Name of the Vulnerable Software and Affected Versions Windows Projected File System Filter Driver affected versions not specified Description A flaw exists in the Windows Projected File System Filter Driver that could allow a local attacker to gain elevated privileges. The issue involves a buffer...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android that stems from improper input validation, which could lead to local elevation of privilege and background activity initiation...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android suffers from a Competitive Condition Issue vulnerability that stems from a competitive condition that could lead to local elevation of privilege...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android suffers from a buffer error vulnerability that stems from a lack of bounds checking and could lead to local elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android, which stems from foreground service abuse and could lead to local elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android that stems from a clickjacking attack that could lead to local elevation of privilege...