5327 matches found
Intel Xeon 6 Processor 访问控制错误漏洞
The Intel Xeon 6 Processor is a new generation of server processors from Intel aimed at data centers, artificial intelligence AI and high performance computing HPC. The Intel Xeon 6 Processor suffers from an improper access control vulnerability that stems from improper access control of the memo...
PT-2025-20937 · Microsoft · Windows Kernel +1
Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: A heap-based buffer overflow issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. This elevation-of-privilege issue can affect the system...
PT-2025-20997 · Microsoft · Azure
Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'path traversal', which allows an unauthorized attacker to elevate privileges over a network...
Intel Graphics 代码问题漏洞
Intel Graphics is a family of graphics cards from Intel Corporation USA. A code issue vulnerability exists in Intel Graphics that stems from an improperly controlled search path that could lead to elevation of privilege...
PT-2025-20943 · Microsoft · Windows Hardware Lab Kit
Name of the Vulnerable Software and Affected Versions: Windows Hardware Lab Kit affected versions not specified Description: The issue concerns the use of hard-coded credentials in the software, which allows an authorized attacker to elevate privileges locally. There is no information provided...
CVE-2025-31222
Technical details (affected component, root cause, impact, vulnerable versions, and fixes) are not publicly provided in the connected documents; monitor for official advisories for updates.
CVE-2025-31222
A correctness issue was addressed with improved checks. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A user may be able to elevate privileges...
CVE-2025-20164
A vulnerability in the Cisco Industrial Ethernet Switch Device Manager DM of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this...
CVE-2025-46265
On F5OS, an improper authorization vulnerability exists where remotely authenticated users LDAP, RADIUS, TACACS+ may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-20164
CVE-2025-20164 affects Cisco IOS Software’s Industrial Ethernet Switch DM. The issue is insufficient authorization validation, allowing an authenticated, remote attacker with valid credentials (privilege level 5+; read-only DM users are level 5) to send a crafted HTTP request and escalate to priv...
Cisco IOS XE 代码问题漏洞
Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A code issue vulnerability exists in Cisco IOS XE that stems from insufficient input...
NVIDIA GPU Display Driver for Linux Privilege Elevation Vulnerability
NVIDIA GPU Display Driver for Linux is a GPU display driver. An elevation of privilege vulnerability exists in NVIDIA GPU Display Driver for Linux, which can be exploited by an attacker to submit a special request, execute arbitrary code, elevation of privilege, and more...
Cisco IOS XE 代码问题漏洞
Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A code issue vulnerability exists in Cisco IOS XE that stems from insufficient input...
CVE-2025-2898
IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control RBAC configurations...
MediaTek Chipsets 缓冲区错误漏洞
MediaTek Chipsets is a family of chips from China's MediaTek Corporation MediaTek. A buffer error vulnerability exists in MediaTek Chipsets that stems from a lack of boundary checking and could lead to local elevation of privilege...
Checkmate 安全漏洞
Checkmate is an open source, self-hosted tool from BlueWave Open Source designed to track and monitor server hardware, uptime, response time and events in real-time with beautiful visualizations. A security vulnerability exists in Checkmate 2.0.2 and earlier versions, which stems from the fact th...
CVE-2025-30390
Improper authorization in Azure allows an authorized attacker to elevate privileges over a network...
CVE-2025-30392
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-3599
Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user...
