2025

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorize

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to

Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to discl

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disc

Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service ov

Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to p

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premi

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to pe

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network

Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclo

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead

Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enabl

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated use

Improper input validation for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platfor

Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge

Incorrect default permissions for some Intel(R) Distribution for Python software installers before version 2025.1.0 may

Uncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an authenticated user to pote

Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authent

Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform

Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform

Protection mechanism failure in the Intel(R) Graphics Driver for the Intel(R) Arc(TM) B-Series graphics before version 3

NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial

Improper access control in some firmware package and LED mode toggle tool for some Intel(R) PCIe Switch software before

Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may al

Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticate

Improper input validation in some firmware for the Intel(R) E810 Ethernet before version 4.6 may allow a privileged user

Uncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow a

Out-of-bounds read in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to

Uncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software before version 24.6.49.8

Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to p

Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authe

Improper access control for some Intel(R) Rapid Storage Technology installation software may allow an authenticated user

Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to pot