Security Updates for Microsoft Office Products (January 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity and availability of the system/application...

CVE-2025-21340: Improper Access Control

Windows Virtualization-Based Security VBS Security Feature Bypass Vulnerability...

CVE-2025-21299: Insecure Storage of Sensitive Information

Windows Kerberos Security Feature Bypass Vulnerability...

CVE-2025-21189: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21332: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

KLA78976 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

KLA78975 Multiple vulnerabilities in Microsoft Windows

Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution...

KLA78972 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service, spoof user interface. Below is a...

CVE-2025-21215: Out-of-bounds Read

Secure Boot Security Feature Bypass Vulnerability...

Adobe Experience Manager Improper Access Control Vulnerability (CNVD-2025-01173)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An...

Adobe Experience Manager Input Validation Error Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

Adobe Connect Access Control Error Vulnerability (CNVD-2025-02843)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect has an Access Control Error vulnerability that stems from the inclusion of an improper access control. An attacker could exploit the vulnerability to cause a security feature bypas...

Adobe Connect Input Validation Error Vulnerability (CNVD-2025-01839)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect has a security vulnerability that can be exploited by an attacker to cause a security feature bypass...

CVE-2024-52831

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...

CVE-2024-43755

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...

CVE-2024-43729

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a high impact on integrity. Exploitation of...

CVE-2024-43731

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of...

CVE-2024-43717

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality...

CVE-2024-43716

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality...

CVE-2024-43717 Adobe Experience Manager | Improper Access Control (CWE-284)

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality...