21 matches found
Windows StateRepository API Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
EUVD-2026-43982
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2026-49170: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-59203
Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...
CVE-2025-59203: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...
PT-2025-42095
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows StateRepository API where sensitive information is inserted into log files. This allows an authorized attacker to disclose information locally. Recommendations ...
EUVD-2022-27019
Malicious code in bioql PyPI...
EUVD-2025-20623
Malicious code in bioql PyPI...
CVE-2025-53789
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
PT-2025-32859 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: Missing authentication for a critical function within the Windows StateRepository API can allow a local attacker to elevate privileges. Recommendations: At the moment, there is no informati...
CVE-2025-53789: Missing Authentication for Critical Function
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
CVE-2025-49723 affects Windows StateRepository API, enabling local tampering of data due to missing authorization in the Server file path. The CNVD/NCSC entries confirm impact as manipulation of data with a high CVSS (8.8) and local attack vector; no public exploitation details are provided in th...
Windows StateRepository API Server file Tampering Vulnerability
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723: Missing Authorization
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2022-21863
Windows StateRepository API Server file Elevation of Privilege Vulnerability...
