CVE-2025-55682

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55337

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55332

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55330

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55330

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55691 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2025-55690 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2025-55688 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2025-55688

CVE-2025-55688 is a Windows Privilege Escalation vulnerability affecting the Windows PrintWorkflowUserSvc. The issue is described as a use-after-free in PrintWorkflowUserSvc that can allow an authorized local attacker to elevate privileges. The practical impact is local elevation of privileges wi...

CVE-2025-55684 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2025-55684

CVE-2025-55684 is a local elevation-of-privilege vulnerability in Windows PrintWorkflowUserSvc caused by a use-after-free condition. It affects Windows components related to printing workflows, allowing an authenticated local attacker to escalate privileges. Public exploits are noted in at least ...

CVE-2025-55331

CVE-2025-55331: Use-after-free in Windows PrintWorkflowUserSvc that allows a locally authenticated user to escalate privileges. Connected advisories indicate Microsoft released October 2025 security updates (e.g., KB5066835 and related KBs) addressing Windows print/cryptography components; apply ...

CVE-2025-55689 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2025-55689

CVE-2025-55689 is a Windows PrintWorkflowUserSvc elevation-of-privilege vulnerability (use-after-free) that allows an authorized, local attacker to escalate privileges. The advisory and MSRC entry confirm the component (PrintWorkflowUserSvc) as affected and describe a local privilege escalation t...

CVE-2025-55685

CVE-2025-55685 is a use-after-free in Windows PrintWorkflowUserSvc that allows an authorized local attacker to elevate privileges. Affected software: Windows PrintWorkflowUserSvc component. Root cause: use-after-free in PrintWorkflowUserSvc (exact technical path not detailed in the provided docs)...

CVE-2025-55686

CVE-2025-55686 is described as a use-after-free vulnerability in Windows PrintWorkflowUserSvc that allows an authorized, local attacker to elevate privileges. The Initial and connected sources confirm the vulnerable component (PrintWorkflowUserSvc) and the local privilege-escalation impact, but d...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to workflow-controller logging configuration with credentials in plaintext. An attacker can access sensitive credentials by reading pod logs if they have permissions to view logs in the affected...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via the unpack function during the artifact extraction due to the lack of header.Name validation in the said function. An attacker can create or overwrite arbitrary files within system directories by supplying a...

CVE-2025-62157

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Argo Workflows versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact repository credentials in plaintext in workflow-controller pod logs. An attacker with permissio...

CVE-2025-62157 Argo Workflows exposes artifact repository credentials in workflow-controller logs

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Argo Workflows versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact repository credentials in plaintext in workflow-controller pod logs. An attacker with permissio...