CVE Brief Security Intelligence

An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS version 6

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API

The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network

Heap buffer overflow in libaom in Google Chrome prior to 139

Use after free in Aura in Google Chrome prior to 139

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter used in the get_submitted_assignments() function in all versions up to, and including, 3

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network

Race in V8 in Google Chrome prior to 139

Out of bounds write in ANGLE in Google Chrome prior to 139

A memory corruption vulnerability exists in Foxit Reader 2025

Adobe Commerce versions 2

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally

Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database

Adobe Commerce versions 2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges over a network

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally

Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally

A improper handling of parameters in Fortinet FortiWeb versions 7

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally

Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network

ImageMagick is free and open-source software used for editing and manipulating digital images

An issue has been discovered in GitLab CE/EE affecting all versions from 18

An issue has been discovered in GitLab CE/EE affecting all versions from 14

An issue has been discovered in GitLab CE/EE affecting all versions from 18

A vulnerability has been identified in SINUMERIK 828D PPU

A vulnerability has been identified in SIMATIC PCS neo V4

Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory corruption error

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access

A low-privileged local attacker can exploit improper permissions on nssm

The affected setup component is vulnerable to DLL hijacking

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC STEP 7 V20 (All versions), SIMATIC WinCC V17 (All versions), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMATIC WinCC V20 (All versions), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3

Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before version 40

Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access

Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2

Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2

Illustrator versions 28

Illustrator versions 28

Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally

Substance3D - Viewer versions 0

Substance3D - Viewer versions 0