5327 matches found
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
Protection mechanism failure in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
Workspace Broker Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Workspace Broker allows an authorized attacker to elevate privileges locally...
Microsoft Office Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally...
Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
PT-2025-28529
Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The issue is related to a use after free condition in the Windows Connected Devices Platform Service, which allows an authorized attacker to elevate...
Microsoft Input Method Editor 竞争条件问题漏洞
Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A competitive conditions issue vulnerability exists in Microsoft Input Method Editor. An attacker cou...
PT-2025-28615 · Microsoft · Windows Notification +1
Name of the Vulnerable Software and Affected Versions: Windows Notification affected versions not specified Description: The issue is related to a use after free condition in Windows Notification, allowing an authorized attacker to locally elevate privileges. This can potentially be exploited by ...
PT-2025-28618 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Microsoft Windows QoS scheduler, allowing an authorized attacker to elevate privileges locally. Recommendations: At...
PT-2025-28509
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk VHDX, enabling an attacker to gain...
Advanced Installer 安全漏洞
Advanced Installer is a packaged software from Advanced Installer open source. A security vulnerability exists in versions of Advanced Installer prior to 22.6, which stems from improper control of the search path element and may result in local elevation of privilege...
PT-2025-28616 · Microsoft · Windows Win32K +1
Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: A heap-based buffer overflow issue in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no informatio...
Microsoft Windows 输入验证错误漏洞
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...
KB5062560: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2025)
The remote Windows host is missing security update 5062560. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...
Adobe ColdFusion 信任管理问题漏洞
Adobe ColdFusion is a dynamic Web server platform maintained by Adobe. Adobe ColdFusion suffers from a trust management issue vulnerability that stems from the use of hard-coded credentials, which can be exploited by an attacker to cause elevation of privilege...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking leading to out-of-bounds writes, which could lead to local elevation of privilege...
PT-2025-28512 · Microsoft · Windows Ssdp Service +1
Name of the Vulnerable Software and Affected Versions: Windows SSDP Service affected versions not specified Description: The issue concerns a double free in the Windows SSDP Service, which allows an authorized attacker to elevate privileges locally. This means an attacker with certain permissions...
PT-2025-28523 · Microsoft · Input Method Editor +1
Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally. Thi...
CVE-2025-27446 Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges
Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIXjava-plugin-runner. Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIXjava-plugin-runner: from 0.2.0 through 0.5.0. Users are...
WordPress plugin CF7 7 Mailchimp Add-on 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
WordPress plugin Red Art 代码问题漏洞
WordPress Red Art is a theme designed for the art field, mainly used to create artist portfolios, galleries, photography exhibitions, tattoo studios and other art websites. WordPress Red Art suffers from a code injection vulnerability that stems from deserializing untrustworthy data, which can be...