Microsoft Hyper-V 输入验证错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could elevate privileges. The...

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone o...

Microsoft SPNEGO Extended Negotiation 安全漏洞

Microsoft SPNEGO Extended Negotiation is a SPNEGO extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft SPNEGO Extended Negotiation. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10...

PT-2025-37259

Name of the Vulnerable Software and Affected Versions Lenovo Dispatcher versions prior to 3.1.0.41 Description An insufficient access control issue exists in the Lenovo Dispatcher drivers. This allows an authenticated local user to execute arbitrary code with elevated privileges. The issue involv...

Microsoft Win32k 资源管理错误漏洞

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Win32k. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windo...

May 13, 2025—KB5058379 (OS Builds 19044.5854 and 19045.5854) - EXPIRED

None None...

July 8, 2025—KB5062552 (OS Builds 22621.5624 and 22631.5624)

None None...

Microsoft Windows PrintWorkflowUserSvc 资源管理错误漏洞

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. A resource management error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc. An attacker could exploit the vulnerability to elevate...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to execute code. The following products and versions are affected: Windows Server 2025 Server...

Microsoft Win32k 安全漏洞

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32K - ICOMP. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows Server 2022, 23H2 Editio...

Microsoft Windows Push Notifications 安全漏洞

Microsoft Windows Push Notifications is a push notification service from Microsoft Corporation USA. It provides a reliable way to deliver new updates. A security vulnerability exists in Microsoft Windows Push Notifications. An attacker could exploit the vulnerability to elevate privileges. The...

Microsoft Windows NT OS Kernel 信息泄露漏洞

Microsoft Windows NT OS Kernel is the core of the Windows operating system from Microsoft Corporation USA and is responsible for managing system resources, providing hardware abstraction, and ensuring system security and stability. An information disclosure vulnerability exists in the Microsoft...

Microsoft Windows DirectX 安全漏洞

Microsoft Windows DirectX is the DirectX end-user runtime Web installer from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows DirectX. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and editions are...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Desktop Windows Manager. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Connected Devices Platform Service. An attacker could exploit the vulnerability to elevate privileges. The following...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Desktop Windows Manager. An attacker exploiting this vulnerability could execute code. The following products and editions are affected:Windo...

CVE-2025-7676

DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...

CVE-2025-7676

DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...

CVE-2025-7676 DLL hijacking of all PE32 executables on Windows 11 for ARM CPUs

DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...

CVE-2025-7676

CVE-2025-7676 describes a DLL hijacking issue affecting Windows 11 for ARM64, where PE32 executables may load Base DLLs from the application directory. The underlying weakness is that ARM64 Windows loads certain DLLs from the executable’s directory, enabling code execution if an attacker can plac...