Lucene search
+L

6612 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•2 views

CVE-2025-29812: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00914EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•17 views

Microsoft DWM Core Library 输入验证错误漏洞

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

7.8CVSS7AI score0.00595EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•2 views

CVE-2025-27476: Use After Free

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

7.8CVSS7.6AI score0.00629EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•1 views

CVE-2025-24074: Improper Input Validation

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.00595EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•2 views

CVE-2025-26647: Improper Input Validation

Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.6AI score0.02217EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/04/08 12:00 a.m.•31 views

KB5055527: Windows Server version 23H2 Security Update (April 2025)

The remote Windows host is missing security update 5055527. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...

8.8CVSS8.2AI score0.13904EPSS
SaveExploits8References75
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•1 views

CVE-2025-27739: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.00629EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/04/07 12:00 a.m.•16 views

Google Android elevation of privilege vulnerability (CNVD-2025-10929)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which originates from the program not properly checking privileges, and can be exploited by an attacker to elevate privileges...

7.8CVSS7.1AI score0.00073EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•16 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking and could lead to local elevation of privilege...

6.8CVSS6.2AI score0.00124EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•17 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking and could lead to local elevation of privilege...

6.7CVSS6.3AI score0.00089EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•14 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking and could lead to local elevation of privilege...

6.7CVSS6.3AI score0.00084EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•18 views

WordPress plugin Vehica Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.6AI score0.00388EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/03 12:03 a.m.•11 views

CVE-2025-24195

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges...

9.8CVSS5.8AI score0.00925EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/02 10:23 p.m.•30 views

CVE-2025-26683

Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...

8.1CVSS7.1AI score0.00679EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/02 12:00 a.m.•13 views

AMD Ryzen AI 安全漏洞

AMD Ryzen AI is an AI acceleration unit NPU in an AMD processor from UltraMicroelectronics AMD. It is used to improve the performance and energy efficiency of AI tasks such as video enhancement, AI assistant optimization, and more. A security vulnerability exists in AMD Ryzen AI that stems from...

7.3CVSS7.7AI score0.00177EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•16 views

Valmet DNA 安全漏洞

Valmet DNA is a platform for automation and information systems from the Finnish company Valmet. In this single platform, process control, machine control, quality control, drive control and equipment condition monitoring systems are covered. A security vulnerability exists in Valmet DNA versions...

8.9CVSS6.2AI score0.00207EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/31 10:24 p.m.•10 views

CVE-2025-24254

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges...

5.8AI score0.00803EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/31 10:24 p.m.•100 views

CVE-2025-24254

This vulnerability in macOS (specifically versions Ventura 13.7.5 , Sonoma 14.7.5 , and Sequoia 15.4 ) is caused by insufficient validation of symlinks . A local user may exploit this flaw to elevate privileges . Remediation is available through the official Apple security updates for the affecte...

8.8CVSS5.8AI score0.00803EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•14 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from insufficient symbolic link validation, which could lead to user elevation of privileges...

8.8CVSS6.2AI score0.00803EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•1 views

CVE-2025-24254: Improper Privilege Management

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges...

8.8CVSS5.7AI score0.00803EPSS
SaveExploits0References1
Rows per page
Query Builder