18566 matches found
CVE-2025-53139
CVE-2025-53139 is tied to Windows Hello. The connected sources confirm a vulnerability where sensitive information is transmitted in cleartext, enabling a local attacker to bypass a Windows Hello security feature. The risk is described as a local, low-gesture exploit with high impact on confident...
CVE-2025-55340 Windows Remote Desktop Protocol Security Feature Bypass
...
CVE-2025-55340
CVE-2025-55340 is a Windows Remote Desktop Protocol security feature bypass caused by improper authentication that can enable an authenticated local attacker to bypass a security feature. The vulnerability affects Windows Remote Desktop Protocol and is rated HIGH with a CVSSv3.1 vector of AV:L/AC...
CVE-2025-55340 Windows Remote Desktop Protocol Security Feature Bypass
...
CVE-2025-55338 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-55333 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-55315
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...
CVE-2025-55315 ASP.NET Security Feature Bypass Vulnerability
...
Rocket.Chat: SSRF via Improper Redirect Validation in Rocket.Chat oEmbed Function
A vulnerability was discovered in Rocket.Chat version 7.10.1 where the oEmbed feature did not properly validate redirected URLs. This allowed an attacker to bypass SSRF protections and access internal network resources that would otherwise be unreachable...
Windows Kernel Security Feature Bypass Vulnerability
Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally...
Windows BitLocker Security Feature Bypass Vulnerability
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows BitLocker Security Feature Bypass Vulnerability
Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows BitLocker Security Feature Bypass Vulnerability
Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows BitLocker Security Feature Bypass Vulnerability
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows Remote Desktop Protocol Security Feature Bypass
Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...
Description of the security update for SharePoint Server 2016 Language Pack: October 14, 2025 (KB5002787)
None None...
Description of the security update for SharePoint Server Subscription Edition: October 14, 2025 (KB5002786)
None None...
Description of the security update for SharePoint Server 2016: October 14, 2025 (KB5002788)
None None...
The king is dead, long live the king! Windows 10 EOL and Windows 11 forensic artifacts
Introduction Windows 11 was released a few years ago, yet it has seen relatively weak enterprise adoption. According to statistics from our Global Emergency Response Team GERT investigations, as recently as early 2025, we found that Windows 7, which reached end of support in 2020, was encountered...
APSB25-94 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical and important vulnerabilities. Successful exploitation could lead to security feature bypass, privilege escalation, and arbitrary code execution...