4939 matches found
CVE-2025-2230
A CVE for Philips ISCV (CVE-2025-2230) describes a Windows logon flow flaw where an AuthContext token can be replayed to bypass authentication. The token is generated from the username, current timestamp, and a fixed AES-128 key shared across installations, enabling high-impact confidentiality an...
The vulnerability of the Fast FAT File System Driver for the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Fast FAT File System Driver for the Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2025-0118
A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this...
CVE-2025-0118
CVE-2025-0118 affects the Windows build of Palo Alto Networks GlobalProtect App. A remote attacker can execute ActiveX controls in the context of an authenticated Windows user by convincing the user to visit a malicious page during the GlobalProtect SAML login flow; non-Windows GlobalProtect clie...
CVE-2025-0117 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and...
Remote Desktop Client RCE Vulnerability (Mar 2025) - Windows
Remote Desktop Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-25008
Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...
CVE-2025-24983 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-24061 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2025-24064 Windows Domain Name Service Remote Code Execution Vulnerability
...
CVE-2025-24064 Windows Domain Name Service Remote Code Execution Vulnerability
...
CVE-2025-24059 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-24059 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-24045 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2025-24988 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2025-24044 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-24044
CVE-2025-24044 is a local privilege-escalation in the Windows Win32 Kernel Subsystem caused by a use-after-free condition. Connected docs classify it as an EoP risk with local exploitability and note fixes in Microsoft Windows updates (e.g., March 2025 cycle). No product/version specifics beyond ...
CVE-2025-24035 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
