4939 matches found
CVE-2025-21371 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21367 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-21367 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-21367
CVE-2025-21367 targets the Windows Win32 Kernel subsystem with a local elevation-of-privilege flaw. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with local access, low attack complexity, and privileges required, and the impact to confidentiality, integrity, and availability as HIGH. C...
CVE-2025-21349
CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...
CVE-2025-21201 Windows Telephony Server Remote Code Execution Vulnerability
...
CVE-2025-21410 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
CVE-2025-21420 Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
...
CVE-2025-21419 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
...
CVE-2025-21419
CVE-2025-21419 is a Windows Setup cleanup vulnerability that enables local elevation of privilege. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) indicates an attacker with low privileges and local access can achieve high integrity and availability impact, without user interaction. The...
CVE-2025-21418
CVE-2025-21418 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Affected: Windows components exposed to local attack surface; exploitability is local with low attack complexity and no user interaction. Public r...
CVE-2025-21376 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Windows Core Messaging Elevation of Privileges Vulnerability
...
Microsoft Windows Kerberos 输入验证错误漏洞
Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed with the goal of providing strong authentication services to client/server applications through a key system. An input...
Microsoft Windows 后置链接漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are affected:Windows...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to cause a denial of service. The following products and editions are affected:Windo...
Microsoft Windows 后置链接漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:Windows 10...
PT-2025-6320 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows versions prior to February 2025 patchday Description: A spoofing issue allows attackers to affect the system. This issue is related to the disclosure of NTLM hash, which can be exploited by attackers. The estimated number of potential...
CVE-2025-1193
Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack by presenting a certificate for a different host...