23592 matches found
CVE-2025-49691
CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...
CVE-2025-49688
Public documents provided do not contain additional technical details (affected product/version, root cause, remediation) beyond the initial description. Monitor for updates from the listed sources as new information becomes available.
CVE-2025-47986
CVE-2025-47986 : Affected software is the Windows Universal Print Management Service. The vulnerability is a use-after-free in that service, enabling an authorized attacker to achieve local privilege escalation. The CVE has a high impact (8.8/10) with local, privilege-related execution and a chan...
CVE-2025-496968
creationtimestamp| type| source ---|---|--- 2025-07-08 16:24:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215 2025-07-19 09:40:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215...
CVE-2025-49735
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti6pyztk52e 2025-07-09 06:23:18+00:00| seen|...
CVE-2025-48815
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...
CVE-2025-36350
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...
CVE-2025-49739
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti3tz2nmq2e...
CVE-2025-0293
CVE-2025-0293 describes a CLRF injection on Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS). A remote authenticated attacker with admin rights can write to a protected configuration file on disk via the vulnerable code paths. Affected versions are ICS < 22.7R2.8 and IPS
CVE-2025-0293
CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk...
CVE-2025-53372 node-code-sandbox-mcp has a Sandbox Escape via Command Injection
node-code-sandbox-mcp is a Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript. Prior to 1.3.0, a command injection vulnerability exists in the node-code-sandbox-mcp MCP Server. The vulnerability is caused by the unsanitized use o...
CVE-2025-40711
creationtimestamp| type| source ---|---|--- 2025-07-08 13:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthgzhddpz2l...
CVE-2025-40712
creationtimestamp| type| source ---|---|--- 2025-07-08 13:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthft6rejm2b...
CVE-2025-40742
creationtimestamp| type| source ---|---|--- 2025-07-08 13:21:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthfegyd4a2f 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-06 2025-07-18 06:30:14+00:00| seen| https://t.me/icscert/1242...
CVE-2025-27057
creationtimestamp| type| source ---|---|--- 2025-07-08 13:19:01+00:00| seen| https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen|...
CVE-2025-27056
Memory corruption during sub-system restart while processing clean-up to free up resources...
CVE-2025-27050
Memory corruption while processing event close when client process terminates abruptly...
CVE-2025-21445
Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host...