1742 matches found
CVE-2025-7676 DLL hijacking of all PE32 executables on Windows 11 for ARM CPUs
DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...
PT-2025-31131 · Microsoft · Windows 11 For Arm64
Name of the Vulnerable Software and Affected Versions: Windows 11 for ARM64 CPU architecture versions prior to 24H2 Description: This issue involves DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. An attacker can execute code by placing a malicious DLL in the...
Brave Browser Blocks Microsoft Recall from Tracking Online Activity
Brave browser now blocks Microsoft Recall by default, preventing screenshots and protecting users’ browsing history on Windows 11...
July 22, 2025—KB5062663 (OS Builds 22631.5699) Preview
None None...
📄 Wifi Mouse 1.9.0.8 Remote Code Execution
WiFi Mouse Server version 1.9.0.8 allows unauthenticated remote code execution by simulating keyboard input over TCP port 1978. This exploit connects to the server and simulates a keystroke to delivery a reverse shell. Exploit Title: Wifi Mouse version 1.9.0.8 - Remote Code Execution Date:...
Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege
Titles: Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege Author: nu11secur1ty Date: 07/09/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/windows/windows-11?r=1 Reference: https://portswigger.net/web-security/access-control CVE-2025-49677 Descripti...
Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges
Exploit Title : Microsoft Graphics Component Windows 11 Pro Build 26100+ - Local Elevation of Privileges Author: nu11secur1ty Date: 07/11/2025 --- Overview This repository contains a PowerShell script to validate whether a Windows 11 system is vulnerable to CVE-2025-49744—a critical local privile...
Microsoft Windows SMB Server 信任管理问题漏洞
Microsoft Windows SMB Server is a network file sharing protocol from Microsoft USA. It allows applications on a computer to read and write files and request services from server programs on a computer network. A vulnerability exists in Microsoft Windows SMB Server for trust management issues. An...
Microsoft Brokering File System 资源管理错误漏洞
Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected: Windows...
Microsoft Windows Kernel 安全漏洞
Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affected: Windows...
Microsoft Windows Cryptographic Services 安全漏洞
Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could gain access to sensitive information. The following...
KB5062570: Windows Server version 23H2 Security Update (July 2025)
The remote Windows host is missing security update 5062570. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...
Microsoft Windows Remote Desktop Licensing Service 访问控制错误漏洞
Microsoft Windows Remote Desktop Licensing Service is an authorization license from Microsoft Corporation USA that manages and authenticates remote desktop connections. An access control error vulnerability exists in Microsoft Windows Remote Desktop Licensing Service. An attacker could bypass...
Microsoft Windows Storage Port Driver 安全漏洞
Microsoft Windows Storage Port Driver is a system-supplied storage port driver from Microsoft USA that is especially suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. A security vulnerability exists in the Microsoft Windows Storage Port Driver. A...
Microsoft Windows Fast Fat Driver 安全漏洞
Microsoft Windows Fast Fat Driver is a complete file system from Microsoft USA that solves a variety of problems such as storing data on disk, interacting with a cache manager, and handling a variety of I/O operations such as file creation, performing reads/writes to files, setting file...
KB5062552: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (July 2025)
The remote Windows host is missing security update 5062552. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...
McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Exploit Title: McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information Date: 24 June 2025 Exploit Author: Keenan Scott Vendor Homepage: hxxps://www.mcafee.com/ Software Download: N/A Unable to find Version: Arguments CmdletBinding param string$DbSource =...
RedirectionGuard: Mitigating unsafe junction traversal in Windows
As attackers continue to evolve, Microsoft is committed to staying ahead by not only responding to vulnerabilities, but also by anticipating and mitigating entire classes of threats. One such threat, filesystem redirection attacks, has been a persistent vector for privilege escalation. In respons...
Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
!/usr/bin/env python3 Exploit Title: Windows 11 SMB Client - Privilege Escalation & Remote Code Execution RCE Author: Mohammed Idrees Banyamer Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-06-13 Tested on: Windows 11 version 22H2, Windows Server 2022, Kali Linux...
