Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of privilege via local access.
Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via local access.
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
AFFECTED_PRODUCTS:
Red Hat Red Hat Enterprise Linux 8,
Red Hat Red Hat Enterprise Linux 9,
Red Hat Red Hat Enterprise Linux 9
... (+12)
Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation of privilege via local access.
Improper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to potentially enable denial of service via local access.
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.
AFFECTED_PRODUCTS:
Totolink A3002r Firmware
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.
AFFECTED_PRODUCTS:
Totolink A3002r Firmware
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.
AFFECTED_PRODUCTS:
Totolink A3002r Firmware
In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this report because the service console is typically only accessible from a local area network, and becau...
AFFECTED_PRODUCTS:
Zkteco Zkbio Cvsecurity
Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.
AFFECTED_PRODUCTS:
Hashicorp Nomad,
Hashicorp Nomad,
Hashicorp Nomad
A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without authentication...
AFFECTED_PRODUCTS:
Forescout Secureconnector
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Animate,
Adobe Animate
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Animate,
Adobe Animate
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Animate,
Adobe Animate
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Bridge,
Adobe Bridge
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Bridge,
Adobe Bridge
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Bridge,
Adobe Bridge
Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. Exploitation of this issue requires user inter...
AFFECTED_PRODUCTS:
Adobe Animate,
Adobe Animate
Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Animate,
Adobe Animate
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Photoshop,
Adobe Photoshop
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Photoshop,
Adobe Photoshop
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious f...
AFFECTED_PRODUCTS:
Adobe Photoshop,
Adobe Photoshop
Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Painter
Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Lightroom
Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Aim T Manageability Api
A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Aim T Manageability Api
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and wou...
AFFECTED_PRODUCTS:
Openpubkey Openpubkey,
Openpubkey Opkssh
Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email message, making any form with this workflow...
AFFECTED_PRODUCTS:
Umbraco Umbraco Forms,
Umbraco Umbraco Forms
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
AFFECTED_PRODUCTS:
Openpubkey Openpubkey
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+12)
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+5)
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office Long Term Servicing Channel,
Microsoft Office Long Term Servicing Channel
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Long Term Servicing Channel
... (+1)
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
AFFECTED_PRODUCTS:
Microsoft Visual Studio 2017,
Microsoft Visual Studio 2019,
Microsoft Visual Studio 2022
... (+3)
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Visual Studio 2019,
Microsoft Visual Studio 2022,
Microsoft Visual Studio 2022
... (+2)
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+8)
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+3)
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office Long Term Servicing Channel,
Microsoft Office Long Term Servicing Channel
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Windows Server 2008
... (+16)
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office
... (+2)
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+12)
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server,
Microsoft SharePoint Server
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server,
Microsoft SharePoint Server
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Excel,
Microsoft Office Online Server
... (+2)