Dell Avamar / AVE < 19.12 privilege elevation (DSA-2025-071)

According to its self-reported version number, the Dell Avamar or Avamar Virtual Edition AVE software running on the remote host is 19.4 prior to 19.12. It is, therefore, affected by a privilege elevation vulnerability: - Dell Avamar, version 19.4 or later, contains an access token reuse...

The vulnerability of the distributed database management system Apache Cassandra lies in its insecure handling of privileges, allowing attackers to elevate their own privileges.

The vulnerability of the distributed database management system Apache Cassandra lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Orbe ONetView Roteador Onet-1200 安全漏洞

Orbe ONetView Roteador Onet-1200 is a router from Orbe Brazil. A security vulnerability exists in the Orbe ONetView Roteador Onet-1200 that originates from a remote attacker being able to elevate privileges from status code 500 to status code 200 via a server response...

CVE-2025-21375

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability...

cassandra-lucene-index 安全漏洞

cassandra-lucene-index is a Lucene-based secondary index for Cassandra open-sourced by NetApp Instaclustr. A security vulnerability exists in cassandra-lucene-index. An authenticated attacker could remotely bypass RBAC and elevate its privileges by exploiting this vulnerability...

Security Updates for Microsoft Visual Studio Products (February 2025)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by a privilege elevation vulnerability. - An attacker could exploit the flaw to gain higher-level access privileges than they are normally allowed. Specifically, in this case, the weakness lies within th...

Intel oneAPI DPC++/C++ Compiler 代码问题漏洞

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2024.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to enable elevation of...

Intel Extreme Tuning Utility 代码问题漏洞

Intel Extreme Tuning Utility is a software from Intel Corporation that can increase CPU frequency. In addition to supporting overclocking of CPUs and graphics cards, the software also features system hardware information detection and real-time monitoring of the current system status to ensure...

FUEL CMS 安全漏洞

FUEL CMS is a Content Management System CMS based on the Codelgniter framework by David McReynolds, an individual developer. A security vulnerability exists in FUEL CMS v1.5.2, which stems from vulnerability to cross-site scripting attacks that can be exploited to achieve elevation of privilege b...

Intel MPI Library 代码问题漏洞

Intel MPI Library is a library from Intel Corporation USA. A code issue vulnerability exists in Intel MPI Library versions prior to 2021.13 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentially enable elevation of privilege via local...

Intel System Security Report and System Resources Defense 缓冲区错误漏洞

Intel System Security Report and System Resources Defense is a security report and system resources defense firmware from Intel Corporation USA. Intel System Security Report and System Resources Defense suffers from a buffer error vulnerability that stems from the presence of incorrect buffer...

Intel Ethernet Port Configuration Tool 代码问题漏洞

Intel Ethernet Port Configuration Tool Intel EPCT is a command line utility from Intel Corporation that allows users to change the link type of a device. A code issue vulnerability exists in Intel Ethernet Port Configuration Tool versions prior to 1.42.8.0 that stems from the presence of an...

CVE-2025-21419 Windows Setup Files Cleanup Elevation of Privilege Vulnerability

...

CVE-2025-21182 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

vscode -- multiple vulnerabilities

VSCode developers report: The update addresses these issues, including a fix for a security vulnerability. Scope nodemodule binary resolution in js-debug Elevation of Privilege Vulnerability with VS Code server for web UI...

PT-2025-6292 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension. There is no information provided about the estimated...

CVE-2022-3701

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges...

The vulnerability of Fortinet FortiClientWindows security devices, related to context switching privilege errors, allows attackers to elevate their privileges.

The vulnerability of Fortinet FortiClientWindows protection devices is related to context switching privilege errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

CVE-2022-0280

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...