Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Windows Privilege Escalation in Multiple Locations

CVE-2025-64783 ASB-A-483074175
Summary

A vulnerability exists in Windows that could allow an attacker to access sensitive information without needing special permissions. This could lead to unauthorized access to data and potentially allow the attacker to take control of the system. Affected users should update their system to the latest version to mitigate this risk.

What to do
  • Update google platform/external/dng_sdk to version 16-qpr2-next:2026-03-01.
  • Update google platform/external/dng_sdk to version 15:2026-03-01.
  • Update google platform/external/dng_sdk to version 16:2026-03-01.
  • Update google platform/external/dng_sdk to version 16-qpr2:2026-03-01.
  • Update google platform/external/dng_sdk to version 14:2026-03-01.
Affected software
VendorProductAffected versionsFix available
adobe dng_software_development_kit <= 1.7.0 –
google platform/external/dng_sdk > 16-qpr2-next:0 , <= 16-qpr2-next:2026-03-01 16-qpr2-next:2026-03-01
google platform/external/dng_sdk > 15:0 , <= 15:2026-03-01 15:2026-03-01
google platform/external/dng_sdk > 16:0 , <= 16:2026-03-01 16:2026-03-01
google platform/external/dng_sdk > 16-qpr2:0 , <= 16-qpr2:2026-03-01 16-qpr2:2026-03-01
google platform/external/dng_sdk > 14:0 , <= 14:2026-03-01 14:2026-03-01
Original title
In multiple locations, there is a possible way to access unexpected data due to multiple causes. This could lead to local escalation of privilege with no additional execution privileges needed. Use...
Original description
In multiple locations, there is a possible way to access unexpected data due to multiple causes. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd CVSS3.1 7.8
Vulnerability type
CWE-190 Integer Overflow
Published: 1 Mar 2026 · Updated: 13 Mar 2026 · First seen: 7 Mar 2026