PT-2025-46475

Name of the Vulnerable Software and Affected Versions Windows OLE affected versions not specified Description A heap-based buffer overflow exists in Windows OLE. This flaw could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...

PT-2025-46495

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference exists in Microsoft Office Excel, potentially allowing a local attacker to execute code. This issue could enable unauthorized code execution...

PT-2025-46509

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office. Exploitation of this issue could allow an unauthorized attacker to execute code locally. The issue involves the use of memory...

PT-2025-46500

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word. This can allow an unauthorized attacker to execute code locally. The issue involves improper memory management,...

PT-2025-46394

Name of the Vulnerable Software and Affected Versions IntelR System Support Utility versions prior to 4.1.0 Description An uncontrolled search path exists in the IntelR System Support Utility. This issue, present within Ring 3: User Applications, may allow an escalation of privilege. A local,...

PT-2025-46494

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. This issue could enable remote attackers to execute...

Intel® DSA Software Advisory

Summary: A potential security vulnerability for some Intel® Driver & Support Assistant Intel® DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-30506 Description: Uncontrolled search...

PT-2025-46415

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 25.2 Description An uncontrolled search path exists in some Intel Driver and Support Assistant versions before 25.2 within Ring 3 User Applications, potentially allowing an escalation of...

CVE-2025-11697: Exposure of Sensitive Information to an Unauthorized Actor

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot...

PT-2025-46387

Name of the Vulnerable Software and Affected Versions IntelR Rapid Storage Technology Application versions prior to 20.0.1021 Description The software contains insecure inherited permissions within Ring 3 User Applications that may allow an escalation of privilege. An unprivileged software...

Intel® System Support Utility Advisory

Summary: A potential security vulnerability for the Intel® System Support Utility may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24842 Description: Uncontrolled search path for the Intel® Syst...

CVE-2025-12489

evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2025-12489 evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability

evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2025-23358

NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...

CVE-2025-23358

NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...

CVE-2025-23358

CVE-2025-23358 affects NVIDIA NVApp for Windows. The vulnerability is a flaw in the NVIDIA NVApp installer that can manipulate a search path element, potentially enabling code execution and privilege escalation on a local attacker’s host. Multiple connected sources confirm the issue and its impac...

PT-2025-44645

Name of the Vulnerable Software and Affected Versions Bizerba Communication Server BCS affected versions not specified Description The Bizerba Communication Server BCS service has an unquoted service path. This occurs when the Windows service's executable path contains spaces but is not enclosed ...

CVE-2025-61161

DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search path C:\ProgramData\Evope. This allows local unprivileged attackers to execute arbitrary code or escalate privileges to SYSTEM by placing a crafted DLL in that...

PT-2025-50327

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.13.0 Description A path traversal flaw exists in the PutContents API of Gogs, a self-hosted Git service. The issue stems from improper symbolic link handling, which allows authenticated attackers to bypass security...

MGASA-2025-0249 Updated icu packages fix security vulnerability

A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...