CVE Brief Security Intelligence

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally

In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network

Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally

Memory safety bugs present in Firefox ESR 140

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally

Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally

Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally

Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally

Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally

Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally

Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7

A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes

Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated attacker to write arbitrary files on the server, potentially leading to remote code execution

In grantAllowlistedPackagePermissions of SettingsSliceProvider

Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls

Privilege escalation in the DOM: Notifications component

Privilege escalation in the Netmonitor component

Privilege escalation in the Netmonitor component

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue

NVIDIA NVTabular for Linux contains a vulnerability in the Workflow component, where a user could cause a deserialization issue

In startAlwaysOnVpn of Vpn

Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary code

A vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session

Input verification vulnerability in the compression and decompression module

Multi-thread race condition vulnerability in the network management module

Wasmi is a WebAssembly interpreter focused on constrained and embedded systems

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally

ColdFusion versions 2025

ColdFusion versions 2025

ColdFusion versions 2025

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4

SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows DOM-Based XSS

ColdFusion versions 2025

A vulnerability has been identified in COMOS V10

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

ZITADEL is an open-source identity infrastructure tool

In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy

In multiple functions of Session

In multiple functions of Session

In disassociate of DisassociationProcessor

In multiple functions of NotificationStation

In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code

In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation

In sendCommand of MediaSessionRecord

In multiple functions of CertInstaller

In connectInternal of MediaBrowser

In multiple functions of BaseBundle

In onActivityResult of EditFdnContactScreen

In multiple functions of HeaderPrivacyIconsController

In appendFrom of Parcel

In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack

In multiple functions of WifiScanModeActivity

In multiple locations, there is a possible way for an application on a work profile to set the main user's default NFC payment setting due to improper input validation

In getComponentName of MediaButtonReceiverHolder

In onSomePackagesChanged of VoiceInteractionManagerService

In init_pkvm_hyp_vcpu of pkvm

In multiple functions of arm-smmu-v3

In startNextMatchingActivity of ActivityTaskManagerService

In validateIconUserBoundary of PrintManagerService

In findAvailRecognizer of VoiceInteractionManagerService

In setDisplayName of AssociationRequest

In multiple functions of mem_protect

In __pkvm_load_tracing of trace

In preparePackage of InstallPackageHelper

Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give allows Code Injection

Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally

Improper access control in Storvsp