CVE-2025-0889

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process...

GE Voluson security vulnerabilities

GE Voluson is a diagnostic ultrasound solution from General Electric GE. A security vulnerability exists in GE Voluson S8 that originates in the Windows operating system PATCHS privilege management. The vulnerability can be exploited by an attacker to cause elevation of privilege by using unknown...

Google Chrome Downloads Code Execution

The vulnerability of the Windows operating system and the Google Chrome browser is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Hyper-V Component Code Execution

The vulnerability of the Hyper-V component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Win32k Privilege Escalation

The vulnerability of the Win32k component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Win32k Disclosure Information

Vulnerability of the Win32k component in Windows operating systems with insecure privilege management. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...