550 matches found
CVE-2025-1910: Improper Neutralization of Special Elements used in a Command
The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM on the Windows machine where the VPN Client is installed...
CVE-2025-4616: Improper Validation of Integrity Check Value
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls...
Palo Alto Prisma Browser 安全漏洞
Palo Alto Prisma Browser is a secure enterprise browser from Palo Alto USA. A security vulnerability exists in Palo Alto Prisma Browser that stems from insufficient policy enforcement and could allow locally authenticated, non-administrative users to bypass the screenshot control feature...
Palo Alto Prisma Browser 安全漏洞
Palo Alto Prisma Browser is a secure enterprise browser from Palo Alto USA. A security vulnerability exists in Palo Alto Prisma Browser that stems from insufficient input validation, which could allow locally authenticated, non-administrative users to bypass browser security controls...
CVE-2025-4618: Cleartext Storage of Sensitive Information in Memory
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue...
Security Updates for Microsoft Office Products (November 2025) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the november-11-2025 advisory. - Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. CVE-2025-60724 ...
EUVD-2025-93429
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2025-93432
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2025-93434
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-42895: Improper Control of Generation of Code
Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability o...
Lenovo Tablets 安全漏洞
Lenovo Tablets is a line of tablet computers from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Tablets that originates from a locally authenticated user or application that could access sensitive device-specific information...
Ivanti Endpoint Manager Deserialization Vulnerability
Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a deserialization...
EUVD-2025-34383
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2025-34381
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2025-34284
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-59200
Concurrent execution using shared resource with improper synchronization 'race condition' in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally...
CVE-2025-58737
Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally...
EUVD-2025-34349
Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally...
