18849 matches found
USN-7608-5: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - Network traffic control; CVE-2025-37890...
USN-7608-5 linux-ibm-5.15, linux-intel-iotg, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - Network traffic control; CVE-2025-37890...
CVE-2025-49545
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of URLs. Exploitation...
USN-7627-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - ACPI drivers; - NILFS2 file system; - File systems infrastructure;...
CVE-2025-49545
Adobe ColdFusion is affected by CVE-2025-49545 (SSRF leading to arbitrary file system read) in versions 2025.2, 2023.14, 2021.20 and earlier. A high-privilege authenticated attacker can force the application to make arbitrary requests by URL injection; exploitation requires no user interaction an...
CVE-2025-49545 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of URLs. Exploitation...
USN-7627-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - ACPI drivers; - NILFS2 file system; - File systems infrastructure;...
CVE-2025-49694
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49694
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49693
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49693
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49677
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49677
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49693
Microsoft Brokering File System contains a double-free vulnerability (CVE-2025-49693) that could enable an authorized local attacker to elevate privileges. The CVE is documented with a 7.8 HIGH base score (local, low attack complexity) across multiple sources; no patch/version details are provide...
CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49721 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49694
CVE-2025-49694 – Microsoft Brokering File System Elevation of Privilege. Description confirms a null pointer dereference that enables an authorized, local attacker to gain elevated privileges. CVSS v3.1 base score 7.8 ( HIGH ); attack vector LOCAL, privileges required LOW, user interaction NONE, ...