CVE-2025-21195

Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...

CVE-2025-49730

Technical details about CVE-2025-49730 are not publicly available in the provided connected documents. Monitor for updates from official advisories; no information on affected products, root cause, or fixes is provided here.

CVE-2025-49725

Technical details beyond the short CVE description are not provided in the supplied documents. No product/version/patch specifics, exploit details, or remediation steps are available. Monitor official Microsoft advisories for patched versions and remediation guidance.

CVE-2025-49693

Microsoft Brokering File System contains a double-free vulnerability (CVE-2025-49693) that could enable an authorized local attacker to elevate privileges. The CVE is documented with a 7.8 HIGH base score (local, low attack complexity) across multiple sources; no patch/version details are provide...

CVE-2025-48821 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

...

CVE-2025-48815 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-49731

CVE-2025-49731 affects Microsoft Teams (Desktop). The vulnerability is due to improper handling of insufficient permissions or privileges, allowing an authorized attacker to elevate privileges over a network. Per the public metrics, the CVSSv3.1 base score is 3.1 (LOW) with Network attack vector,...

CVE-2025-49686

Technical details for CVE-2025-49686 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are confirmed here. Monitor for official updates from Microsoft and CVE references.

CVE-2025-47987

Technical details of CVE-2025-47987 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2025-47971

CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...

Windows Media Elevation of Privilege Vulnerability

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally...

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally...

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

Windows Event Tracing Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

Workspace Broker Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Workspace Broker allows an authorized attacker to elevate privileges locally...