2025

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor sno

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbi

Substance3D - Stager versions 3.1.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbi

Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft

When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple use

A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions <

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not

When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple user

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files w

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory expos

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted fil

Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i

Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could levera

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to by

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extens

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat E

Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a net

Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provis

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorize

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (onli

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (onli

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose in

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose in

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorize

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.