18851 matches found
CVE-2025-29822
CVE-2025-29822 affects Microsoft OneNote (Office) with an incomplete input validation in OneNote that allows local security feature bypass. The issue is classified as high severity (CVSS 3.1: 7.8; Local attack, no privileges required, user interaction required; impacts Confidentiality, Integrity,...
CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability
...
Description of the security update for OneNote 2016: April 8, 2025 (KB5002622)
Description of the security update for OneNote 2016: April 8, 2025 KB5002622 Applies To OneNote 2016 Summary This security update resolves a Microsoft OneNote security feature bypass vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
Description of the security update for SharePoint Enterprise Server 2016: April 8, 2025 (KB5002692)
Description of the security update for SharePoint Enterprise Server 2016: April 8, 2025 KB5002692 Applies To SharePoint Server 2016 Note Notice KB 5002692 is now revised and available again for download. Please see the "How to get and install the update" section. Summary This security update...
End of support for Office 2016 and Office 2019
End of support for Office 2016 and Office 2019 Applies To Office 2019 Office 2016 Get help with Copilot Tell me about end of support for Office 2016 for Mac. Show me how to remove the conflicting 2013 app. Support for Office 2016 and Office 2019 ended on October 14, 2025. While your Office 2016 a...
Description of the security update for Office 2016: April 8, 2025 (KB5002573)
Description of the security update for Office 2016: April 8, 2025 KB5002573 Applies To Office Standard 2016 Office Professional 2016 Office Professional Plus 2016 Office Home and Business 2016 Office Home and Student 2016 Summary This security update resolves a Microsoft Word security feature...
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
Windows Kerberos Security Feature Bypass Vulnerability
Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally...
Windows Hello Security Feature Bypass Vulnerability
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...
Microsoft OneNote Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature over a network...
PT-2025-15586 · Microsoft · Windows Kerberos +1
Name of the Vulnerable Software and Affected Versions: Windows Kerberos versions prior to April 2025 Patch Tuesday Description: A security-feature bypass vulnerability exists in Windows Kerberos due to insecure storage of sensitive information. Exploitation allows an authorized attacker to bypass...
CVE-2025-27192: Insufficiently Protected Credentials
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to...
CVE-2025-27191: Improper Access Control
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...
CVE-2025-30293: Improper Input Validation
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access...
CVE-2025-30291: Exposure of Sensitive Information to an Unauthorized Actor
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. A low privileged attacker with local access could leverage this vulnerability to gain access to sensitive information which could be used ...
CVE-2025-30288: Improper Access Control
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low privileged attacker with local access could leverage this vulnerability to bypass security protections and execute code...
CVE-2025-29816: Acceptance of Extraneous Untrusted Data With Trusted Data
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-27735: Insufficient Verification of Data Authenticity
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
CVE-2025-29822: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...