2943 matches found
KLA86591 PE vulnerability in Microsoft Open Source Software
An elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-53788 Related products Microsoft-Windows CVE list CVE-2025-53788 high Solution Install necessary updates from the KB...
KLA86588 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Web Deploy can be exploited remotely to execute arbitrary code. 2...
KB5063878: Windows 11 Version 24H2 / Windows Server 2025 Security Update (August 2025)
The remote Windows host is missing security update 5063878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. CVE-2025-53766 - Missing synchronization in Windows Hyper-V allows an...
About Elevation of Privilege – Windows Update Service (CVE-2025-48799) vulnerability
About Elevation of Privilege - Windows Update Service CVE-2025-48799 vulnerability. This vulnerability is from the July Microsoft Patch Tuesday. Improper link resolution before file access 'link following' in the Windows Update Service allows an authorized attacker to elevate privileges to "NT...
.NET 8.0 Update - August 5, 2025 (KB5064838)
None None...
July 22, 2025—KB5062660 (OS Build 26100.4770) Preview
None None...
Important: Red Hat Security Advisory: OpenJDK 8u462 Windows Security Update
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
July Microsoft Patch Tuesday
July Microsoft Patch Tuesday. A total of 152 vulnerabilities - twice as many as in June. Of these, 15 vulnerabilities were added between the June and July MSPT. One vulnerability is exploited in the wild: Memory Corruption - Chromium CVE-2025-6554 One vulnerability has an exploit available on...
July 13, 2025—KB5064489 (OS Build 26100.4656) Out-of-band
None None...
CVE-2025-48799
Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...
The vulnerability of the Windows operating system update service allows a hacker to elevate their privileges to a system level.
The vulnerability of the Windows Operating System Update Service lies in the improper handling of symbolic links during file access. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level by performing operations such as deleting, moving, or renami...
CVE-2025-48799
Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2025-48799
Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...
2025-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5062554)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
CVE-2025-48799
CVE-2025-48799 is an Elevation of Privilege flaw in Windows Update Service (wuauserv) described as: improper link resolution before file access ('link following') can allow an authorized local attacker to elevate to NT AUTHORITY\SYSTEM when Windows 10/11 systems have at least two drives and Stora...
CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability
...
CVE-2025-48799 Windows Update Service Elevation of Privilege Vulnerability
...
Exploit for Link Following in Microsoft
Description This is PoC for CVE-2025-48799, an elevation of pr...
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...