Mageia: Security Advisory (MGASA-2025-0130)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-21594

creationtimestamp| type| source ---|---|--- 2025-04-09 19:59:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309777091248159 2025-04-09 20:35:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114309916508212730...

Cortex XDR Agent: Local Windows User Can Crash the Agent

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it. Work...

Microsoft Excel 2016 Multiple Vulnerabilities (KB5002704)

This host is missing an important security update according to Microsoft KB5002704 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Fedora: Security Advisory (FEDORA-2025-31036092ea)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 2016 Multiple Vulnerabilities (KB5002700)

This host is missing an important security update according to Microsoft KB5002700 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Access 2016 RCE Vulnerability (KB5002701)

This host is missing an important security update according to Microsoft KB5002701. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

openSUSE Security Advisory (SUSE-SU-2025:1157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 2016 RCE Vulnerability (KB4484432)

This host is missing an important security update according to Microsoft KB4484432 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Sante PACS Server Web Detection

Binary data santepacsserverwebdetect.nbin...

openSUSE Security Advisory (SUSE-SU-2025:1153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:1162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 2016 Elevation of Privilege Vulnerability (KB5002669)

This host is missing an important security update according to Microsoft KB5002669 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2025-32026

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd75664z72c...

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

CVE-2025-26679 RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

...

CVE-2025-26644

CVE-2025-26644 affects Windows Hello by allowing local spoofing due to inadequate handling of adversarial input perturbations. Microsoft documents a Windows Hello security fix path via monthly updates (e.g., KB5055528 for Windows 11 22621/22631; KB5055519 for older Windows builds) that enforces v...

CVE-2025-27442

creationtimestamp| type| source ---|---|--- 2025-04-08 11:28:40+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lmcenrnrjk2f 2025-04-08 16:46:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10949 2025-04-08 19:51:28+00:00| seen| https://t.me/cvedetector/22480 2025-04-12...

CVE-2025-26654

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10871 2025-04-08 09:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5cjxzha2g 2025-04-08 11:29:21+00:00| seen| https://t.me/cvedetector/22432...

Windows Hello Spoofing Vulnerability

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...