PT-2025-16001 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM affected versions not specified Description: A command injection issue in the Palo Alto Networks Cortex XDR Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges o...

Linux DRM/V3D DoS

The vulnerability of the DRM/V3D component in the Linux operating system is related to the exhaustion of file descriptors. Exploiting this vulnerability can allow a hacker to cause a service failure...

Windows Cryptographic Services Disclosure

The vulnerability of Windows operating system’s Cryptographic Services is related to the use of a cryptographic primitive with a risky implementation. Exploiting this vulnerability could allow an attacker to disclose the protected information...

Windows Routing and Remote Access Service Unauthorized Access

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems occurs when the operation is performed outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

LDAP Service Windows DoS

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Update Stack Privilege Escalation

The vulnerability of the Windows Update Stack component of the Microsoft Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Kerberos Privilege Escalation

The vulnerability of the Kerberos authentication protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Linux DRM Display Component Influence

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to influence the accessibility of protected information...

Windows upnphost DLL Privilege Escalation

The vulnerability of the upnphost.dll library in the Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow attackers to increase their privileges...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

HTTP.sys DoS

The vulnerability of the HTTP.sys driver on Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux USB Gadget DoS

The vulnerability in the drivers/usb/musb/musbgadget.c component of the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux fs/ntfs3/inode.c DoS

The vulnerability in the fs/ntfs3/inode.c component of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows Routing and Remote Access Service Unauthorized Access

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems occurs when the operation is performed outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

CVE-2025-30659

An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a device configured for Secure Vector Routing SVR receives a...

CVE-2025-30654

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged, authenticated attacker with access to the CLI to access sensitive information. Through the execution of a specific...

CVE-2025-30653

An Expired Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause Denial of Service DoS.On all Junos OS and Junos OS Evolved platforms, when an MPLS Label-Switched Path LSP is...

CVE-2025-30655

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to cause a Denial-of-Service DoS. When a specific "show bgp neighbor" CLI command is run, the rpd cpu...

CVE-2025-30657

An Improper Encoding or Escaping of Output vulnerability in the Sampling Route Record Daemon SRRD of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a device configured for flow-monitoring receives a specific BGP update message, i...