5327 matches found
CVE-2025-47993
Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-21195
Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...
CVE-2025-49730
Technical details about CVE-2025-49730 are not publicly available in the provided connected documents. Monitor for updates from official advisories; no information on affected products, root cause, or fixes is provided here.
CVE-2025-49725
Technical details beyond the short CVE description are not provided in the supplied documents. No product/version/patch specifics, exploit details, or remediation steps are available. Monitor official Microsoft advisories for patched versions and remediation guidance.
CVE-2025-49693
Microsoft Brokering File System contains a double-free vulnerability (CVE-2025-49693) that could enable an authorized local attacker to elevate privileges. The CVE is documented with a 7.8 HIGH base score (local, low attack complexity) across multiple sources; no patch/version details are provide...
CVE-2025-48821 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
...
CVE-2025-48815 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
...
CVE-2025-49731
CVE-2025-49731 affects Microsoft Teams (Desktop). The vulnerability is due to improper handling of insufficient permissions or privileges, allowing an authorized attacker to elevate privileges over a network. Per the public metrics, the CVSSv3.1 base score is 3.1 (LOW) with Network attack vector,...
CVE-2025-49686
Technical details for CVE-2025-49686 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are confirmed here. Monitor for official updates from Microsoft and CVE references.
CVE-2025-47987
Technical details of CVE-2025-47987 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.
CVE-2025-47971
CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...
Windows Media Elevation of Privilege Vulnerability
Use after free in Windows Media allows an authorized attacker to elevate privileges locally...
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally...
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally...
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...