4939 matches found
CVE-2025-33065 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-33062 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-33063 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-33063
CVE-2025-33063 affects the Windows Storage Management Provider and describes an out-of-bounds read that can let an authorized local attacker disclose information. The vulnerability has a high confidentiality impact (data exposure) with local attack vector; there is no exploitation detail in the I...
CVE-2025-33060 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-33058 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-32720
CVE-2025-32720 is a Windows Storage Management Provider vulnerability described as an information disclosure via an out-of-bounds read. The connected NCSC advisory lists it under Windows Storage Management Provider with CVSS 5.50 (Impact: Access to sensitive data) and indicates a local attack vec...
CVE-2025-32719 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-32713
CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...
CVE-2025-32713 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-32713 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-32710 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2025-32710
CVE-2025-32710 refers to a Use-After-Free vulnerability in Windows Remote Desktop Services that allows a network-based attacker to execute code on affected systems. The CVE is linked to Windows RDS components; the Nessus plugin notes it alongside CVE-2025-32715, and an exploit repo exists, but ex...
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Null pointer dereference in Windows Local Security Authority LSA allows an authorized attacker to deny service over a network...
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
Microsoft Windows Local Security Authority Subsystem Service 代码问题漏洞
The Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone o...
PT-2025-24843 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is an out-of-bounds read in Windows Storage Management Provider, allowing an authorized attacker to disclose information locally. There is no information available about the...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
VulnCheck KEV: CVE-2025-33053
Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files...
