KLA78976 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

KLA78975 Multiple vulnerabilities in Microsoft Windows

Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution...

KLA78972 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service, spoof user interface. Below is a...

CVE-2025-21215: Out-of-bounds Read

Secure Boot Security Feature Bypass Vulnerability...

PT-2025-1104

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass vulnerability in the MapUrlToZone method, which is associated with incorrect path equivalence resolution. This could allow a remote attacker ...

Microsoft Office security vulnerabilities

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security feature bypass vulnerability exists in Microsoft Office, which can be exploited by attackers to...

CVE-2025-21328: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21299: Insecure Storage of Sensitive Information

Windows Kerberos Security Feature Bypass Vulnerability...

Improper verification of source of a communication channel in administrative interface

An improper verification of source of a communication channel vulnerability CWE-940 in FortiClientEMS may allow a remote attacker to bypass the trusted host feature via session connection...

Security Updates for Microsoft Office Products (January 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity and availability of the system/application...

PT-2025-2454 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: FortiClientEMS versions 6.4.0 through 7.0.x FortiClientEMS versions 7.2.0 through 7.2.4 FortiClientEMS version 7.4.0 Description: The issue is related to an improper verification of the source of a communication channel, which may allow a...

PT-2025-1105

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass vulnerability in the MapUrlToZone method, which is associated with incorrect path equivalence resolution. This could allow a remote attacker ...

CVE-2025-21340: Improper Access Control

Windows Virtualization-Based Security VBS Security Feature Bypass Vulnerability...

CVE-2025-21189: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21213: Improper Access Control

Secure Boot Security Feature Bypass Vulnerability...

CVE-2025-21329: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21364: Deserialization of Untrusted Data

Microsoft Excel Security Feature Bypass Vulnerability...

CVE-2025-21268: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2024-56138

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was identified during Quarkslab's audit of the timestamp feature. During the timestamp signature generation, the revocation status of the certificates used to...

UBUNTU-CVE-2024-47796

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...