Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

22,410 of 48,153· Page 274/449
5.7
CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a p

6.7
CVE-2025-20015

Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authent

5.5
CVE-2025-20013

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge

4.9
CVE-2025-20012

Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enabl

4.1
CVE-2025-20009

Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards m

6.1
CVE-2024-48869

Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when

6.7
CVE-2024-47800

Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enabl

6.7
CVE-2024-47795

Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authe

6.7
CVE-2024-47550

Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to pote

6.7
CVE-2024-46895

Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101

6.7
CVE-2024-45371

Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow

5.6
CVE-2024-45332

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executio

5.6
CVE-2024-43420

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executio

5.3
CVE-2024-43101

Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.10

6.7
CVE-2024-39833

Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentia

5.9
CVE-2024-39758

Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allow

6.7
CVE-2024-31073

Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially ena

6.1
CVE-2024-29222

Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable den

5.6
CVE-2024-28956

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) P

6.7
CVE-2024-28954

Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentiall

5.6
CVE-2024-28036

Improper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to potentially enable denial of ser

6.5
CVE-2025-45746

In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authentica

5.5
CVE-2025-30329

Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to

6.1
CVE-2025-47280

Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch a

5.5
CVE-2025-32703

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locall

5.9
CVE-2025-30394

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to

5.5
CVE-2025-30320

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that cou

5.5
CVE-2025-30319

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that cou

5.7
CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an

6.5
CVE-2025-29968

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service

6.5
CVE-2025-29961

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor

6.5
CVE-2025-29960

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor

6.5
CVE-2025-29959

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to dis

6.5
CVE-2025-29958

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to dis

6.2
CVE-2025-29957

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally

5.4
CVE-2025-29956

Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.

6.2
CVE-2025-29955

Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally.

5.9
CVE-2025-29954

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacke

4.0
CVE-2025-29839

Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.

5.5
CVE-2025-29837

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to dis

6.5
CVE-2025-29836

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor

6.5
CVE-2025-29835

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor

6.5
CVE-2025-29832

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor

6.5
CVE-2025-29830

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to dis

5.5
CVE-2025-29829

Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose info

6.7
CVE-2025-27488

Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.

6.5
CVE-2025-26685

Improper authentication in Microsoft Defender for Identity allows an unauthorized attacker to perform spoofing over an a

6.7
CVE-2025-26684

External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privil

6.4
CVE-2024-6364

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled a

5.3
CVE-2025-4427KEV

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to a

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.