CVE-2025-58714

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-58715

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

CVE-2025-55684

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

CVE-2025-55680

Time-of-check time-of-use toctou race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-55339

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally...

CVE-2025-55331

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

CVE-2025-55247

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2025-50175

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-58725 Windows COM+ Event System Service Elevation of Privilege Vulnerability

...

CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-58714

CVE-2025-58714 is an elevation-of-privilege issue in the Windows Ancillary Function Driver for WinSock caused by improper access control. The description indicates an authorized attacker could locally elevate privileges. Connected Microsoft advisories (KB/OS update pages) show this CVE among Wind...

CVE-2025-58714 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-55697 Azure Local Elevation of Privilege Vulnerability

...

CVE-2025-53150 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-50175 Windows Digital Media Elevation of Privilege Vulnerability

...

CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-47989 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

Windows Graphics Component Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Windows Authentication Elevation of Privilege Vulnerability

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

Storport.sys Driver Elevation of Privilege Vulnerability

Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally...