CVE Brief Security Intelligence

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network

Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally

Adobe Connect versions 2025

Adobe Framemaker versions 2022

PraisonAI is a multi-agent teams system

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally

Deserialization of Untrusted Data vulnerability in Apache Storm

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Windows Client Side Caching driver (csc

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network

Acrobat Reader versions 26

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7

Nitro PDF Pro for Windows 14

Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally

simple-git enables running native Git commands from JavaScript

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code

A Broken Object-Level Authorization (BOLA) in the /Settings/UserController

Chamilo LMS is an open-source learning management system

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally

Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to elevate privileges locally

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Chamilo LMS is an open-source learning management system

A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController

A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController

Pachno 1

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network

A vulnerability was detected in Tenda F456 1

A flaw has been found in Tenda F456 1

A vulnerability has been found in Tenda F456 1

A vulnerability was found in Tenda F456 1

A vulnerability was determined in Tenda F456 1

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3

A security vulnerability has been detected in UTT HiPER 1200GW up to 2

A weakness has been identified in Totolink A3002MU B20211125

A vulnerability has been identified in SINEC NMS (All versions < V4

A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network

openITCOCKPIT is an open source monitoring tool built for different monitoring engines

Chamilo LMS is an open-source learning management system

ColdFusion versions 2023

A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2

ColdFusion versions 2023

jq is a command-line JSON processor

Totara LMS v19

nanobot is a personal AI assistant

InDesign Desktop versions 20

InDesign Desktop versions 20

InDesign Desktop versions 20

InDesign Desktop versions 20