CVE-2024-36348

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

Description of the security update for SharePoint Server Subscription Edition: July 8, 2025 (KB5002751)

Description of the security update for SharePoint Server Subscription Edition: July 8, 2025 KB5002751 Applies To SharePoint Server Subscription Edition Summary This security update resolves a Microsoft SharePoint remote code execution vulnerability and Microsoft SharePoint Server spoofing...

Description of the security update for SharePoint Enterprise Server 2016: July 8, 2025 (KB5002744)

Description of the security update for SharePoint Enterprise Server 2016: July 8, 2025 KB5002744 Applies To SharePoint Server 2016 Summary This security update resolves a Microsoft SharePoint remote code execution vulnerability, Microsoft SharePoint Server spoofing vulnerability, and Microsoft Wo...

Windows SmartScreen Security Feature Bypass Vulnerability

Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...

Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Windows BitLocker Security Feature Bypass Vulnerability

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Windows BitLocker Security Feature Bypass Vulnerability

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Windows BitLocker Security Feature Bypass Vulnerability

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Office Developer Platform Security Feature Bypass Vulnerability

Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...

CVE-2025-49544: Improper Restriction of XML External Entity Reference

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information or...

CVE-2025-49539: Improper Restriction of XML External Entity Reference

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information...

CVE-2025-49536: Incorrect Authorization

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of...

CVE-2025-49535: Improper Restriction of XML External Entity Reference

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access sensitive information or denial of service b...

CVE-2025-49756: Use of a Broken or Risky Cryptographic Algorithm

Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...

CVE-2025-48818: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-48804: Acceptance of Extraneous Untrusted Data With Trusted Data

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

PT-2025-28751 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference 'XXE' vulnerability. This could result in a security feature bypass, allowing a...

PT-2025-28743 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier ColdFusion versions prior to 2025.3 Description: The issue is related to an incorrect authorization vulnerability that could result in a security feature bypass. A low-privileged attack...

PT-2025-28742 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference 'XXE' that could result in a security feature bypass. An attacker could exploit this to...

PT-2025-28630

Name of the Vulnerable Software and Affected Versions: Office Developer Platform affected versions not specified Description: The issue concerns the use of a broken or risky cryptographic algorithm in the Office Developer Platform, which allows an authorized attacker to bypass a local security...