KB5062560: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2025)

The remote Windows host is missing security update 5062560. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...

Advanced Installer 安全漏洞

Advanced Installer is a packaged software from Advanced Installer open source. A security vulnerability exists in versions of Advanced Installer prior to 22.6, which stems from improper control of the search path element and may result in local elevation of privilege...

CVE-2025-47996: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally...

Adobe ColdFusion 信任管理问题漏洞

Adobe ColdFusion is a dynamic Web server platform maintained by Adobe. Adobe ColdFusion suffers from a trust management issue vulnerability that stems from the use of hard-coded credentials, which can be exploited by an attacker to cause elevation of privilege...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking leading to out-of-bounds writes, which could lead to local elevation of privilege...

CVE-2025-48821: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...

PT-2025-28512 · Microsoft · Windows Ssdp Service +1

Name of the Vulnerable Software and Affected Versions: Windows SSDP Service affected versions not specified Description: The issue concerns a double free in the Windows SSDP Service, which allows an authorized attacker to elevate privileges locally. This means an attacker with certain permissions...

CVE-2025-49685: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2025-49679: Numeric Truncation Error

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2025-49661: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-49675: Use After Free

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

PT-2025-28523 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Input Method Editor IME, which allows an authorized attacker to elevate privileges locally. Thi...

CVE-2025-47973: Buffer Over-read

Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...

CVE-2025-27446 Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIXjava-plugin-runner. Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIXjava-plugin-runner: from 0.2.0 through 0.5.0. Users are...

WordPress plugin CF7 7 Mailchimp Add-on 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin Red Art 代码问题漏洞

WordPress Red Art is a theme designed for the art field, mainly used to create artist portfolios, galleries, photography exhibitions, tattoo studios and other art websites. WordPress Red Art suffers from a code injection vulnerability that stems from deserializing untrustworthy data, which can be...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 Sudo chroot Elevation of Privil...

BIT-ASPNET-CORE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

NSClient++ 安全漏洞

NSClient++ is an NSClient open source monitoring agent program for Windows systems. A security vulnerability exists in NSClient++ version 0.5.2.35, which stems from an insecure configuration that could lead to elevation of privilege...

Infinera G42 安全漏洞

Infinera G42 is a modular platform for optical networks from Infinera USA. A security vulnerability exists in Infinera G42 version R6.1.3, which stems from a misconfiguration and could lead to information disclosure and elevation of privilege...