CVE-2025-59190

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

CVE-2025-59190

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

CVE-2025-59253 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59253

CVE-2025-59253 is documented with concrete details in connected sources: a local-privilege/reliance on an access-control flaw in the Windows Search Component that can enable a denial-of-service by an authorized attacker. The CVE is linked to Microsoft/security guidance entries and EUVD-2025-34274...

CVE-2025-59253 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59198 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59198

CVE-2025-59198 is a Microsoft Windows vulnerability in the Windows Search Component caused by improper input validation that can allow an authorized, local attacker to cause a denial of service. The CVE is shown in the Windows Search Component entries with a base CVSS v3.1 score of 5.0 (MEDIUM), ...

CVE-2025-59198 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59190 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59190

CVE-2025-59190 affects the Microsoft Windows Search Component. It is due to improper input validation and allows a local attacker to cause a Denial of Service. The CVE is rated with CVSS 3.1 (base 5.5, MEDIUM); attack vector LOCAL, privileges REQUIRED NONE, user interaction REQUIRED, and impact l...

CVE-2025-59190 Windows Search Service Denial of Service Vulnerability

...

CVE-2025-59196

CVE-2025-59196: Windows SSDP Service race condition leading to local privilege escalation. Affected component: Windows SSDP Service. Root cause: concurrency with improper synchronization on a shared resource. Impact: attacker with local access could elevate privileges (CVSSv3.1: AV Local, AC High...

CVE-2025-57716

An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...

CVE-2025-57716

An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...

CVE-2025-57716

An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...

CVE-2025-57716

FortiClient on Windows is affected by an Uncontrolled Search Path Element (CWE-427) vulnerability across FortiClient versions 7.0–7.2.11 and 7.4.0–7.4.3. The issue enables local, low-privilege users to perform a DLL hijacking attack by placing a malicious DLL in the FortiClient Online Installer i...

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

Windows Search Service Denial of Service Vulnerability

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

CVE-2025-10558

A stored Cross-site Scripting XSS vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...