4631 matches found
CVE-2025-49539
CVE-2025-49539 concerns Adobe ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier affected by an XML External Entity (XXE) vulnerability that can bypass security features and leak sensitive information. The issue is caused by improper restriction of XML external entities, enabling a high-pri...
CVE-2025-48818
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2025-49740 Windows SmartScreen Security Feature Bypass Vulnerability
...
CVE-2025-48818 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48814 Remote Desktop Licensing Service Security Feature Bypass Vulnerability
...
CVE-2025-48814 Remote Desktop Licensing Service Security Feature Bypass Vulnerability
...
CVE-2025-48804 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48800 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48800 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48003 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48001 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-49756 Office Developer Platform Security Feature Bypass Vulnerability
...
Windows BitLocker Security Feature Bypass Vulnerability
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Office Developer Platform Security Feature Bypass Vulnerability
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...
Windows BitLocker Security Feature Bypass Vulnerability
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows SmartScreen Security Feature Bypass Vulnerability
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-49756: Use of a Broken or Risky Cryptographic Algorithm
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally...
CVE-2025-49544: Improper Restriction of XML External Entity Reference
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information or...
PT-2025-28743 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier ColdFusion versions prior to 2025.3 Description: The issue is related to an incorrect authorization vulnerability that could result in a security feature bypass. A low-privileged attack...
CVE-2025-49535: Improper Restriction of XML External Entity Reference
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access sensitive information or denial of service b...