CVE-2025-48515

Insufficient parameter sanitization in AMD Secure Processor ASP Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution...

CVE-2025-48515

Insufficient parameter sanitization in AMD Secure Processor ASP Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution...

CVE-2025-29949

CVE-2025-29949 is an AMD ASP Boot Loader issue limited to legacy recovery mode. The connected documents confirm insufficient input parameter sanitization in the ASP Boot Loader, which could allow an out-of-bounds write that corrupts Secure DRAM and may cause a denial of service. Affected software...

CVE-2025-29949

Insufficient input parameter sanitization in AMD Secure Processor ASP Boot Loader legacy recovery mode only could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service...

CVE-2025-29949

Insufficient input parameter sanitization in AMD Secure Processor ASP Boot Loader legacy recovery mode only could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service...

CVE-2025-29949

Insufficient input parameter sanitization in AMD Secure Processor ASP Boot Loader legacy recovery mode only could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service...

February 10, 2026—Hotpatch KB5075943 (OS Build 20348.4711)

February 10, 2026—Hotpatch KB5075943 OS Build 20348.4711 Applies To Windows Server 2022 Datacenter: Azure Edition This Hotpatch update for Windows Server 2022 KB5075943, improves functionality, performance, and reliability. To learn more about differences between security updates, optional...

February 10, 2026—KB5075912 (OS Builds 19045.6937 and 19044.6937)

February 10, 2026—KB5075912 OS Builds 19045.6937 and 19044.6937 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability o...

February 10, 2026—KB5075971 (Monthly Rollup)

February 10, 2026—KB5075971 Monthly Rollup Applies To Windows Server 2012 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012. For a successful installation, please make sure a...

February 10, 2026—KB5075999 (OS Build 14393.8868)

February 10, 2026—KB5075999 OS Build 14393.8868 Applies To Windows Server 2016, all editions Win 10 Ent LTSB 2016 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certai...

February 10, 2026—KB5075897 (OS Build 25398.2149)

February 10, 2026—KB5075897 OS Build 25398.2149 Applies To Windows Server, version 23H2 This cumulative update for Windows Server, version 23H2 KB5075897, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more...

February 10, 2026—KB5075899 (OS Build 26100.32370)

February 10, 2026—KB5075899 OS Build 26100.32370 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5075899, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more...

February 10, 2026—KB5075904 (OS Build 17763.8389)

February 10, 2026—KB5075904 OS Build 17763.8389 Applies To Windows Server 2019 Win 10 Ent LTSC 2019 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

February 10, 2026—KB5075970 (Monthly Rollup)

February 10, 2026—KB5075970 Monthly Rollup Applies To Windows Server 2012 R2 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation, please make...

February 10, 2026—Hotpatch KB5075942 (OS Build 26100.32313)

February 10, 2026—Hotpatch KB5075942 OS Build 26100.32313 Applies To Windows Server 2025 Datacenter: Azure Edition This update applies to Windows Server 2025 Datacenter & Standard machines connected to Azure Arc. To learn more about differences between security updates, optional non-security...

February 10, 2026—KB5075906 (OS Build 20348.4773)

February 10, 2026—KB5075906 OS Build 20348.4773 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5075906, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences...

cn.acmsmu.mgsky1:spring-boot-shiro-starter (>=1.0.0, <=2.0.0), cn.xuqiudong.basic:lcxm-cas-sso (1.0.0-2024) +457 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.8.0)

org.apache.shiro:shiro-core MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - cn.acmsmu.mgsky1:spring-boot-shiro-starter =1.0.0, =1.0, =1.0, =1.0, =1.0, =6.5.7, =6.5.7, =6.5.11, =6.5....

com.diboot:diboot-file-spring-boot-starter (2.6.0), com.diboot:diboot-iam-spring-boot-starter (2.6.0) +155 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.9.0)

org.apache.shiro:shiro-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.diboot:diboot-file-spring-boot-starter 2.6.0 - com.diboot:diboot-iam-spring-boot-starter 2.6.0 -...

com.github.hiwepy:shiro-biz (>=1.1.0.release, <=1.1.2.release), com.github.hiwepy:shiro-csrfguard-spring-boot-starter (>=1.0.0.release, <=1.0.1.release) +41 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.5.0)

org.apache.shiro:shiro-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.github.hiwepy:shiro-biz =1.1.0.release, =1.0.0.release, =1.0.0, =1.0.0, =1.3.1, =1.0.0, =1.4.0 -...

PT-2026-7464

Name of the Vulnerable Software and Affected Versions AMD Secure Processor ASP Boot Loader affected versions not specified Description A flaw exists in the AMD Secure Processor ASP Boot Loader where insufficient parameter sanitization could allow an attacker with access to SPIROM upgrade to...