21453 matches found
CVE-2025-61823
Adobe ColdFusion is affected by CVE-2025-61823: an Improper Restriction of XML External Entity Reference (XXE) vulnerability allows a high-privilege attacker to read arbitrary files on the server. The issue affects ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier, with exploitation requir...
Microsoft Patch Tuesday for December 2025 — Snort rules and prominent vulnerabilities
The Patch Tuesday for December of 2025 includes 57 vulnerabilities, including two that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the two "critical" vulnerabilities is "less likely." CVE ‑2025‑62562 i...
EUVD-2023-60135
In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4mbgoodgroup Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check...
EUVD-2023-60134
In the Linux kernel, the following vulnerability has been resolved: hfs: fix missing hfsbnodeget in hfsbnodecreate Syzbot found a kernel BUG in hfsbnodeput: kernel BUG at fs/hfs/bnode.c:466! invalid opcode: 0000 1 PREEMPT SMP KASAN CPU: 0 PID: 3634 Comm: kworker/u4:5 Not tainted...
EUVD-2023-60158
In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime...
EUVD-2023-60150
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on direct node in truncatednode syzbot reports below bug: BUG: KASAN: slab-use-after-free in f2fstruncatedatablocksrange+0x122a/0x14c0 fs/f2fs/file.c:574 Read of size 4 at addr ffff88802a25c000 by tas...
CVE-2025-62569
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62569
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62470
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-62469
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62469
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62470
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-62464
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62467
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62464
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62467
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62462
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62456
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code over a network...