PT-2025-15650 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier Description: The issue is related to an Insufficiently Protected Credentials vulnerability, which could lead to a security feature bypass. A high...

Adobe ColdFusion Access Control Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability that can be exploited by attackers to cause a security...

Microsoft Windows Hello security vulnerabilities

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

Microsoft Windows Input Validation Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass certain features. The following products and editions are...

Adobe ColdFusion input validation error vulnerability

Adobe ColdFusion is a suite of rapid application development platforms from the American company Audobee Adobe. The platform includes an integrated development environment and a scripting language. An input validation error vulnerability exists in Adobe ColdFusion versions 2023.12, 2021.18, 2025....

CVE-2025-29816: Acceptance of Extraneous Untrusted Data With Trusted Data

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network...

PT-2025-15519

Name of the Vulnerable Software and Affected Versions: Windows Defender Application Control WDAC affected versions not specified Description: The issue is related to improper access control, allowing an unauthorized attacker to bypass a security feature locally. This security-feature bypass...

KLA82406 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

CVE-2025-27190: Improper Access Control

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

Adobe ColdFusion information leakage vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an information disclosure vulnerability that can be exploited by attackers to caus...

CVE-2025-27192: Insufficiently Protected Credentials

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to...

PT-2025-15659 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0 and earlier ColdFusion versions 2023.12 ColdFusion versions 2021.18 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which could le...

PT-2025-15660 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2023.12 and earlier ColdFusion version 2021.18 and earlier ColdFusion version 2025.0 and earlier Description: The issue is an Information Exposure vulnerability that could result in a security feature bypass. An attacker...

CVE-2025-27191: Improper Access Control

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

APSB25-15 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical and important vulnerabilities that could lead to arbitrary file system read, arbitrary code execution and security feature bypass...

Security Updates for Microsoft Office Products (April 2025)

The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2025-29792 - A security feature bypass vulnerability exists. An attacker...

Security Updates for Microsoft Word Products (April 2025)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

Security Updates for Microsoft OneNote Products (April 2025)

The Microsoft OneNote Products are missing a security update. They are, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the system/application. Note that...

PT-2025-15586 · Microsoft · Windows Kerberos +1

Name of the Vulnerable Software and Affected Versions: Windows Kerberos versions prior to April 2025 Patch Tuesday Description: A security-feature bypass vulnerability exists in Windows Kerberos due to insecure storage of sensitive information. Exploitation allows an authorized attacker to bypass...

SUSE-RU-2025:1150-1 Recommended update for apache-commons-io

This update for apache-commons-io fixes the following issues: apache-commons-io was updated from version 2.15.1 to 2.18.0: - Key changes across versions: Cleaner code and updated dependencies Improved security when handling serialized data with the new safe deserialization feature New features fo...