6598 matches found
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
Protection mechanism failure in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
PT-2025-28529
Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The issue is related to a use after free condition in the Windows Connected Devices Platform Service, which allows an authorized attacker to elevate...
Microsoft Input Method Editor 竞争条件问题漏洞
Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A competitive conditions issue vulnerability exists in Microsoft Input Method Editor. An attacker cou...
PT-2025-28615 · Microsoft · Windows Notification +1
Name of the Vulnerable Software and Affected Versions: Windows Notification affected versions not specified Description: The issue is related to a use after free condition in Windows Notification, allowing an authorized attacker to locally elevate privileges. This can potentially be exploited by ...
CVE-2025-49732: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2025-47987: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally...
CVE-2025-48816: Integer Overflow or Wraparound
Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally...
Advanced Installer 安全漏洞
Advanced Installer is a packaged software from Advanced Installer open source. A security vulnerability exists in versions of Advanced Installer prior to 22.6, which stems from improper control of the search path element and may result in local elevation of privilege...
PT-2025-28509
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk VHDX, enabling an attacker to gain...
CVE-2025-48820: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
PT-2025-28616 · Microsoft · Windows Win32K +1
Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: A heap-based buffer overflow issue in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no informatio...
CVE-2025-48815: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
PT-2025-28618 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Microsoft Windows QoS scheduler, allowing an authorized attacker to elevate privileges locally. Recommendations: At...
CVE-2025-49731: Improper Handling of Insufficient Permissions or Privileges
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
CVE-2025-49693: Double Free
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-48819: Sensitive Data Storage in Improperly Locked Memory
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
Microsoft Windows 输入验证错误漏洞
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...
CVE-2025-21195: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...