CVE-2025-29841: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Universal Print Management Service allows an authorized attacker to elevate privileges locally...

Intel RealSense SDK 代码问题漏洞

Intel RealSense SDK is a depth-aware camera development kit from Intel Corporation USA that supports 3D vision application development. A code issue vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improperly controlled search paths and could lead to elevatio...

Intel Server M50FCP和Intel Server D50DNP 安全漏洞

Intel Server M50FCP and Intel Server D50DNP are both servers from Intel Corporation USA. A security vulnerability exists in Intel Server M50FCP and Intel Server D50DNP that stems from a UEFI firmware SmiVariable driver contention condition that could result in elevated privileges...

Intel Network Adapters 代码问题漏洞

Intel Network Adapters is a family of adapters from Intel Corporation USA. A code issue vulnerability exists in Intel Network Adapters versions prior to 11 29.4, which stems from insufficient search path control and could lead to elevation of privilege...

Intel Core Ultra Processors 安全漏洞

Intel Core Ultra Processors is a Core series central processing unit CPU from Intel Corporation USA. A security vulnerability exists in Intel Core Ultra Processors that stems from improper locking and could lead to elevation of privilege...

Intel Advisor 代码问题漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A code issue vulnerability exists in Intel Advisor that stems from an improperly controlled search path that could lead to elevation of privilege...

Intel oneAPI Level Zero 代码问题漏洞

Intel oneAPI Level Zero is an underlying heterogeneous computing interface standard from Intel Corporation USA that provides direct hardware access to Intel GPUs/FPGAs. A code issue vulnerability exists in Intel oneAPI Level Zero that stems from an uncontrolled search path that could lead to loca...

CVE-2025-30387: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure allows an unauthorized attacker to elevate privileges over a network...

Intel Graphics 代码问题漏洞

Intel Graphics is a family of graphics cards from Intel Corporation USA. A code issue vulnerability exists in Intel Graphics that stems from an improperly controlled search path that could lead to elevation of privilege...

PT-2025-20937 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: A heap-based buffer overflow issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. This elevation-of-privilege issue can affect the system...

PT-2025-20997 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'path traversal', which allows an unauthorized attacker to elevate privileges over a network...

PT-2025-20943 · Microsoft · Windows Hardware Lab Kit

Name of the Vulnerable Software and Affected Versions: Windows Hardware Lab Kit affected versions not specified Description: The issue concerns the use of hard-coded credentials in the software, which allows an authorized attacker to elevate privileges locally. There is no information provided...

CVE-2025-29975: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Intel Xeon 6 Processor 访问控制错误漏洞

The Intel Xeon 6 Processor is a new generation of server processors from Intel aimed at data centers, artificial intelligence AI and high performance computing HPC. The Intel Xeon 6 Processor suffers from an improper access control vulnerability that stems from improper access control of the memo...

CVE-2025-31222

A correctness issue exists in several Apple operating systems, including iOS 18.5 , iPadOS 18.5 , macOS Sequoia 15.5 , macOS Sonoma 14.7.6 , macOS Ventura 13.7.6 , tvOS 18.5 , visionOS 2.5 , and watchOS 11.5 . This flaw may allow a user to elevate privileges . The issue has been addressed with im...

CVE-2025-31222

A correctness issue was addressed with improved checks. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A user may be able to elevate privileges...

CVE-2025-31222: Improper Privilege Management

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A user may be able to elevate privileges...

CVE-2025-20164

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager DM of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this...

CVE-2025-29827: Improper Authorization

Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network...

CVE-2025-29813: Authentication Bypass by Assumed-Immutable Data

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...