The vulnerability of the Remote Access Connection Manager (RASMan) service for Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Access Connection Manager RASMan service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2025-0131

An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However,...

The vulnerability of the Microsoft Virtual Machine Bus (VMBus) component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Virtual Machine Bus VMBus component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2025-20006

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20039

Race condition for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-30388

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally...

CVE-2025-30388 Windows Graphics Component Remote Code Execution Vulnerability

...

CVE-2025-29956 Windows SMB Information Disclosure Vulnerability

...

CVE-2025-29956 Windows SMB Information Disclosure Vulnerability

...

CVE-2025-29839 Windows Multiple UNC Provider Driver Information Disclosure Vulnerability

...

CVE-2025-29838 Windows ExecutionContext Driver Elevation of Privilege Vulnerability

...

CVE-2025-29838 Windows ExecutionContext Driver Elevation of Privilege Vulnerability

...

CVE-2025-29836 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-29835 Windows Remote Access Connection Manager Information Disclosure Vulnerability

...

CVE-2025-29832 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

...

CVE-2025-27488 Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability

...

CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-32706

CVE-2025-32706 is an elevation-of-privilege flaw in Windows CLFS Driver (heap-based buffer overflow) that enables local privilege escalation. Affected product: Windows Common Log File System Driver. Base CVSS v3.1: 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction. Pub...

CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...