CVE-2025-21191: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

CVE-2025-26679: Use After Free

Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally...

CVE-2025-27732: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-26687: Use After Free

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-29812: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...

PT-2025-15479 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: A time-of-check time-of-use toctou race condition exists, allowing an authorized attacker to elevate privileges locally. This issue can be exploited by attacker...

CVE-2025-26640: Use After Free

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-24060: Improper Input Validation

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-27727: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-27741: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

PT-2025-15520 · Microsoft · Windows Rpc Endpoint Mapper Service +1

Name of the Vulnerable Software and Affected Versions: Windows RPC Endpoint Mapper Service affected versions not specified Description: The issue is related to a use after free vulnerability in the RPC Endpoint Mapper Service, which allows an authorized attacker to elevate privileges locally. Thi...

CVE-2025-21204: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-27739: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft DWM Core Library 输入验证错误漏洞

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

CVE-2025-27476: Use After Free

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2025-24074: Improper Input Validation

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-26647: Improper Input Validation

Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

KB5055527: Windows Server version 23H2 Security Update (April 2025)

The remote Windows host is missing security update 5055527. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...

Google Android elevation of privilege vulnerability (CNVD-2025-10929)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which originates from the program not properly checking privileges, and can be exploited by an attacker to elevate privileges...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking and could lead to local elevation of privilege...