CVE-2025-53789: Missing Authentication for Critical Function

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

Intel oneAPI Toolkits 代码问题漏洞

Intel oneAPI Toolkits is a set of core tools and libraries from Intel Corporation USA. It is used to develop high-performance, data-centric applications across different architectures. A code issue vulnerability exists in Intel oneAPI Toolkits that stems from an uncontrolled search path that coul...

CVE-2025-49762: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Intel 800 Series Ethernet 安全漏洞

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. An elevation of privilege vulnerability exists in Intel 800 Series Ethernet, which stems from insufficient control flow managemen...

Intel Clock Jitter Tool 代码问题漏洞

Intel Clock Jitter Tool is a clock jitter analysis tool developed by Intel based on mathematical physics methodology. Intel Clock Jitter Tool suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause an elevati...

PT-2025-32796

Name of the Vulnerable Software and Affected Versions Windows Installer versions prior to September 2025 Description A weak authentication issue in Windows Installer can allow an authorized attacker to elevate privileges locally. This issue was addressed with a security enhancement in the August...

Siemens SIMATIC RTLS Locating Manager 安全漏洞

Siemens SIMATIC RTLS Locating Manager is an RTLS locating manager from Siemens, Germany. A security vulnerability exists in Siemens SIMATIC RTLS Locating Manager versions prior to V3.3, which stems from improperly protected credentials and could result in elevated privileges...

CVE-2025-49758: Improper Privilege Management

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-50161: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-50173: Weak Authentication

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...

Intel AI Playground 安全漏洞

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

KLA86584 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service. Below is a complete list of vulnerabilitie...

Intel Xeon 6 Processor 安全特征问题漏洞

Intel Xeon 6 Processor is a family of chips from Intel Corporation USA. A security signature issue vulnerability exists in Intel Xeon 6 Processor that stems from an improperly implemented security check that could lead to elevation of privilege...

CVE-2025-49759: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-53154: NULL Pointer Dereference

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-53727: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-53729: Improper Access Control

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

Intel PCIe Switch 访问控制错误漏洞

The Intel PCIe Switch is a class of devices from Intel Corporation USA used to extend and manage PCIe bus connectivity. An access control error vulnerability exists in Intel PCIe Switch versions prior to MR41.0b1, which stems from improper access control and could lead to elevation of privilege...

Intel Xeon Processor 缓冲区错误漏洞

Intel Xeon Processors is a family of processors launched by Intel for the enterprise-class server, workstation, and high-performance computing HPC markets, mainly serving data centers, cloud computing, artificial intelligence, and other areas. Intel Xeon Processors is vulnerable to an elevation o...

Intel Xeon 6 Scalable processors 安全漏洞

Intel Xeon 6 Scalable processors is a processor from Intel Corporation USA. A security vulnerability exists in Intel Xeon 6 Scalable processors that stems from insufficient access control granularity, which could lead to elevation of privilege...