CVE Brief Security Intelligence

A use-after-free vulnerability in Windows Remote Desktop Services allows an authenticated attacker to elevate privileges over a network.

A use after free vulnerability in the Microsoft Windows Remote Desktop Client allows an unauthenticated attacker to execute arbitrary code over a network via user interaction.

A use after free vulnerability in the Windows Remote Access Connection Manager allows an authenticated attacker to elevate privileges over a network.

A use after free vulnerability in Windows Remote Desktop Services allows an authenticated attacker to execute code over a network.

An integer overflow in the Windows Remote Access Service Infrastructure permits an authenticated attacker to elevate privileges over a network.

A heap buffer overflow in the libyuv library within Google Chrome on Windows allows for potential code execution.

An authentication bypass vulnerability in ASP.NET allows an authenticated attacker to manipulate data and gain unauthorized access.

A SQL injection vulnerability in Microsoft SQL Server allows an authenticated attacker to execute arbitrary SQL commands and elevate privileges across the network.

A heap-based buffer overflow in the Windows DHCP Server allows an unauthenticated, adjacent attacker to achieve remote code execution.

A use-after-free vulnerability in the Windows Runtime allows an authenticated local attacker to escalate their privileges.

A heap-based buffer overflow in the Windows Kernel allows an authenticated attacker to elevate privileges locally on the affected system.

A heap-based buffer overflow in the Windows Win32K component allows an authenticated attacker to elevate their privileges locally.

A use-after-free vulnerability in the Windows Kernel allows an authenticated attacker to elevate privileges locally on the affected system.

A heap-based buffer overflow in the Desktop Window Manager allows an authenticated attacker to achieve local privilege escalation.

A heap-based buffer overflow in the Windows Network File System allows an authenticated attacker to elevate privileges over the network.

A stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authenticated attacker to execute code over the network.

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthenticated attacker to execute arbitrary code over a network via a specially crafted file.

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthenticated attacker to execute arbitrary code over a network via a specially crafted file.

A heap-based buffer overflow and out-of-bounds read in Microsoft Windows Media Foundation allow an unauthenticated attacker to execute arbitrary code over a network via a crafted file.

A heap-based buffer overflow in the Microsoft Input Method Editor (IME) allows an authorized local attacker to elevate privileges on affected Windows systems.

A heap-based buffer overflow in the Windows DHCP Server allows an authenticated attacker to execute arbitrary code over a network.

A heap-based buffer overflow in Active Directory Domain Services allows an authenticated attacker to execute arbitrary code over a network.

A use after free vulnerability in the Windows Kernel allows a locally authenticated attacker to elevate privileges to the system level.

A deserialization vulnerability in Microsoft SQL Server allows an authenticated attacker to execute arbitrary code over the network.

A deserialization of untrusted data flaw in various Microsoft SQL Server releases allows authenticated attackers to execute code over a network.

A heap-based buffer overflow in Microsoft Exchange Server allows an authenticated attacker to achieve remote code execution.

A type confusion vulnerability in the V8 engine of Google Chrome allows a remote attacker to execute arbitrary code via a malicious webpage.

Symfony components are vulnerable to insufficient verification of data authenticity and improper input validation, potentially allowing unauthorized data access.

An improper access control vulnerability in Microsoft Configuration Manager allows an authenticated attacker to elevate privileges over a network.

An incorrect implementation of the authentication algorithm in ASP.NET allows authenticated attackers to potentially compromise the integrity and availability of the system.

An incorrect implementation of the authentication algorithm in the Windows SMB Server allows authorized attackers to elevate privileges over a network.

An untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally on the target system.

A race condition vulnerability in the Windows Runtime allows an authenticated local attacker to achieve privilege escalation by exploiting improper synchronization of shared resources.

A race condition in Windows Media allows an authenticated attacker to escalate privileges over a network, potentially leading to unauthorized system control.

An improper link resolution vulnerability in Microsoft PC Manager allows an authenticated local attacker to perform file access operations that lead to privilege escalation.

A missing authentication vulnerability in the Windows Server Update Service allows an authenticated attacker to elevate privileges over a network.

An out-of-bounds read vulnerability in the Windows Kernel allows an authenticated attacker to perform local privilege escalation.

Improper authorization in Active Directory Certificate Services (AD CS) allows an authenticated attacker to elevate privileges over a network.

A missing authorization vulnerability in Microsoft SharePoint allows an authenticated attacker to elevate privileges over a network.

A relative path traversal vulnerability in Microsoft Windows Admin Center allows an authenticated attacker to execute arbitrary code over a network.

A command injection vulnerability in Microsoft Windows Admin Center allows an authenticated attacker to execute arbitrary commands over a network.

Visual Studio Code contains a vulnerability involving the inclusion of functionality from an untrusted control sphere, which allows an unauthorized attacker to bypass security features over a network.

Microsoft SharePoint contains an improper authorization vulnerability that allows an authenticated attacker to elevate their privileges over a network.

An integer overflow or wraparound vulnerability in Windows RDP allows an unauthorized attacker to execute arbitrary code over a network.

Improper certificate validation in the Azure Monitor Agent Metrics Extension allows an unauthenticated attacker to elevate privileges over an adjacent network.

Improper access control in the Windows MIDI Service Module allows an authenticated attacker to perform local privilege escalation.

A relative path traversal vulnerability in Age of Empires II: Definitive Edition allows an unauthenticated attacker to execute code over a network.

A race condition in the Windows Win32K component allows an authenticated local attacker to elevate privileges on the affected system.

An integer underflow in the Windows Reliable Multicast Transport Driver (RMCAST) allows an unauthenticated attacker to execute code over an adjacent network.

A race condition in the Windows TCP/IP stack allows an unauthenticated attacker to execute code over an adjacent network.

A missing authentication vulnerability in Microsoft Azure CycleCloud allows an authenticated attacker to elevate privileges over the network.

A race condition in the Windows Print Spooler allows an authenticated attacker to execute arbitrary code over the network.

Twig is vulnerable to code injection, allowing an authenticated user to perform unauthorized actions by manipulating template generation.

Twig is vulnerable to code injection, allowing an authenticated attacker to manipulate template generation and execute arbitrary code.

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows a low-privileged attacker to inject malicious scripts into form fields.

A vulnerability in the Symfony framework and Mailer component allows for argument injection due to improper neutralization of argument delimiters.

An XML External Entity (XXE) vulnerability in the Symfony DomCrawler component allows unauthenticated attackers to potentially read sensitive local files.

An incorrect authorization vulnerability in the Symfony Security-Http component allows unauthenticated remote attackers to bypass security controls.

A vulnerability in the Symfony YAML component allows for XML entity expansion, which can lead to denial of service via resource exhaustion.

The Symfony YAML component is susceptible to inefficient regular expression complexity, which can be exploited by an unauthenticated attacker to cause a denial of service.

Adobe Illustrator is susceptible to an untrusted search path vulnerability that could allow an attacker to execute arbitrary code with the privileges of the current user.

An issue in docuForm GmbH Client v.

A Local File Inclusion (LFI) vulnerability exists in docuForm GmbH Client v.

A vulnerability in the docuForm GmbH FSM Client v.11.11c login.php component allows remote attackers to perform user enumeration.

Apache Kylin is vulnerable to OS command injection, which allows an authenticated attacker to execute arbitrary system commands on the underlying server.

A vulnerability in Spotfire Server modules allows for potential security compromise, requiring user interaction to facilitate unauthorized access or impact.

A vulnerability in the Argo CD repo-server allows an unauthenticated attacker with network access to achieve remote code execution.

A vulnerability in Pi-hole allows for improper ownership management, which may lead to unauthorized system-level actions when exploited by a local user.

A memory allocation vulnerability in the Pillow library allows remote attackers to trigger excessive memory consumption, leading to a denial of service.

A vulnerability in Nexus Repository Manager's API key generation process allows remote attackers to gain unauthorized access to repository operations as a targeted user.

Sesame Time contains an authorization bypass vulnerability in its session management and REST v3 API, allowing unauthenticated attackers to access unauthorized information.

Grafana MCP Server is vulnerable to a confused-deputy attack, allowing unauthenticated remote attackers to exfiltrate service-account tokens via a crafted X-Grafana-URL header.

MetaGuru HCM is susceptible to SQL injection, which could allow an authenticated attacker to manipulate database queries and potentially access or modify sensitive data.

The DP Calendar extension for Joomla contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary database queries.

The EDocman extension for Joomla contains an unauthenticated SQL injection vulnerability allowing remote attackers to execute arbitrary database commands.

Rclone is susceptible to path traversal and authorization bypass vulnerabilities that may allow an authenticated user to access or manipulate restricted files.

Rockwell Automation FactoryTalk Services Platform version 6.60 contains a flaw that permits the bypass of JSON Web Token signature validation during Okta Web Authentication.

A stack-based buffer overflow vulnerability exists in the Tenda BE12 Pro router, which may allow an authenticated attacker to trigger memory corruption.

A stack-based buffer overflow vulnerability exists in Tenda BE12 Pro firmware version 16.03.66.23, which could allow an authenticated attacker to trigger memory corruption.

A stack-based buffer overflow vulnerability exists in Tenda BE12 Pro firmware version 16.03.66.23, which could allow an authenticated attacker to trigger memory corruption.

A stack-based buffer overflow vulnerability exists in Tenda BE12 Pro firmware version 16.03.66.23, which could allow an authenticated attacker to trigger memory corruption.

A stack-based buffer overflow vulnerability in the Tenda BE12 Pro router allows for potential memory corruption.

A memory corruption vulnerability exists in the Tenda BE12 Pro router, specifically involving a stack-based buffer overflow.

A regular expression denial of service vulnerability exists in the linkify-it library due to inefficient complexity.

A double free vulnerability exists in the Rockwell Automation FLEX 5000 EtherNet/IP Adapter, potentially leading to a denial-of-service condition.

A resource exhaustion vulnerability exists in the Rockwell Automation 1734 POINT I/O module, allowing unauthenticated attackers to trigger a denial-of-service.

A resource exhaustion vulnerability in the Rockwell Automation 1718-AENTR and 1719-AENTR modules allows unauthenticated, remote attackers to cause a denial-of-service.

A denial-of-service vulnerability in Rockwell Automation communication modules arises from improper validation of CIP Implicit Connection packets, allowing unauthenticated remote disruption.

TP-Link Kasa EC71 and EC70 v4 firmware versions store a static cryptographic private key on a read-only filesystem, which is shared across all devices.

A PHP object injection vulnerability exists in the Drupal Plotly.js Graphing module due to improper control of dynamically determined object attributes during deserialization.

An Insecure Direct Object Reference (IDOR) in docuForm GmbH Client v.11.11c allows remote attackers with low privileges to execute arbitrary code and access other users' data.

decompress before 4.