CVE-2025-47979 Microsoft Failover Cluster Information Disclosure Vulnerability

...

EUVD-2025-34367

Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally...

CVE-2025-47979

Technical details about CVE-2025-47979 (affected component, root cause, exploitability, and remediation specifics) are not disclosed in the provided documents. Monitor for updates from official advisories (Microsoft/MSRC, NVD, NCSC) for precise information.

Microsoft Failover Cluster Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally...

Microsoft Failover Cluster Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally...

Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally...

Microsoft Windows Failover Cluster 信息泄露漏洞

The Microsoft Windows Failover Cluster is a group of independent computers from Microsoft Corporation USA that work together to improve the availability and scalability of cluster roles formerly known as clustered applications and services. An information disclosure vulnerability exists in...

PT-2025-41993

Name of the Vulnerable Software and Affected Versions Microsoft Windows Failover Cluster affected versions not specified Description A flaw exists in Windows Failover Cluster that allows an authorized attacker to disclose sensitive information locally through the insertion of this information int...

CVE-2025-60536

An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...

Microsoft Windows Failover Cluster 日志信息泄露漏洞

The Microsoft Windows Failover Cluster is a group of independent computers from Microsoft Corporation USA that work together to improve the availability and scalability of cluster roles formerly known as clustered applications and services. A log information disclosure vulnerability exists in...

CVE-2025-60536

An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...

PT-2025-42080

Name of the Vulnerable Software and Affected Versions Windows Failover Cluster affected versions not specified Description An issue exists in Windows Failover Cluster that allows an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to an...

CVE-2025-60536

The CVE-2025-60536 entry affects kafka-ui, specifically the Configure New Cluster interface in versions v0.6.0 through v0.7.2. The issue allows an attacker to trigger a Denial of Service by uploading a crafted configuration file. The available connected documents confirm the affected product/vers...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 7 (6.2.1-97)

This update provides stability fixes and support for cumulative updates. Clusters running version 6.2.1 or later can now upgrade directly to the latest available version in a single step. Vulnerability id: VSTOR-91715 Failed to retry updating the kernel. Vulnerability id: VSTOR-93149, VSTOR-10082...

PT-2025-42137

Name of the Vulnerable Software and Affected Versions Microsoft Failover Cluster Virtual Driver affected versions not specified Description An issue exists in Microsoft Failover Cluster Virtual Driver that allows an authorized attacker to disclose information locally. The issue involves the...

Microsoft Windows Failover Cluster 信息泄露漏洞

The Microsoft Windows Failover Cluster is a group of independent computers from Microsoft Corporation USA that work together to improve the availability and scalability of cluster roles formerly known as clustered applications and services. An information disclosure vulnerability exists in...

PT-2025-42164

An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...

kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwis...

kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwis...

CVE-2025-62159

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...