EUVD-2025-93424

Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...

CVE-2025-62219 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

...

CVE-2025-62219 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

...

EUVD-2025-93425

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...

CVE-2025-62218

CVE-2025-62218 affects Microsoft Wireless Provisioning System. The issue is described as a race condition caused by concurrent execution on a shared resource, enabling an authorized local attacker to elevate privileges. Supported documents identify the affected component and the local privilege-e...

CVE-2025-62218 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

...

CVE-2025-62218 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

...

CVE-2025-62218

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...

Code Injection

Gardener Extensions is vulnerable to Code Injection. The vulnerability is due to improper handling of user-controlled input in Terraformer-based infrastructure provisioning across AWS, Azure, OpenStack, and GCP providers, which allows an attacker with administrative privileges in a Gardener proje...

PT-2025-46511

Name of the Vulnerable Software and Affected Versions Microsoft Wireless Provisioning System affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in the Microsoft Windows Wireless Provisioning System. An attacker could exploit the vulnerability to elevate privileges. The following produc...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A competitive condition issue vulnerability exists in Microsoft Windows Wireless Provisioning System. An attacker could exploit the vulnerability to elevate privileges. The following products...

PT-2025-46512

Name of the Vulnerable Software and Affected Versions Microsoft Wireless Provisioning System affected versions not specified Description A double free condition exists in the Microsoft Wireless Provisioning System. This allows an authorized attacker to gain elevated privileges on a local system...

CVE-2025-62218: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...

CVE-2025-62219: Double Free

Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally...

Recommended update of flake-pilot (moderate)

openSUSE security update: recommended update of flake-pilot ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20000-1 Rating: moderate References: bsc1248004 Cross-References: CVE-2025-55159 CVSS scores: CVE-2025-55159 SUSE : 5.8...

GO-2025-3981 Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning in github.com/gardener/gardener-extension-provider-aws

Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning in github.com/gardener/gardener-extension-provider-aws...

Improper Isolation or Compartmentalization

Overview org.apache.syncope.core:syncope-core-provisioning-java is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to Improper Isolation or...