2025

Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a net

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privilege

Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose informatio

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacke

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to p

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premi

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to pe

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to versio

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclo

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could r

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by an out-of-bounds write vulnerability that could result i

Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors whe

Improper input validation in the Intel Edger8r Tool for some Intel(R) SGX SDK may allow an authenticated user to potenti

Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enabl

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 fo

Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge