April 8, 2025—KB5055581 (Monthly Rollup)

None None...

KB5055515: Cumulative security update for Internet Explorer: April 8, 2025

None None...

April 8, 2025—KB5055527 (OS Build 25398.1551)

None None...

April 8, 2025—KB5055596 (Security-only update)

None None...

PT-2025-15570 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft Office Word, which can be exploited by an...

Siemens Industrial Edge Devices

SUMMARY Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to...

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

KB5055667: Servicing stack update for Windows Server 2012: April 8, 2025

None None...

Security Updates for Microsoft SharePoint Server 2019 (April 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-26642, CVE-2025-27747, CVE-2025-29793, CVE-2025-29794 %NASLMINLEVEL 7030...

KLA82407 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Azure Local Cluster...

KLA82405 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in ASP.NET Core and Visual Studi...

PT-2025-15512 · Microsoft · Windows Rdp Client +1

Name of the Vulnerable Software and Affected Versions: Windows LDAP versions prior to the fixed version Description: The issue is related to a use after free vulnerability in the Windows LDAP protocol, allowing an unauthorized attacker to execute code over a network. This vulnerability enables...

PT-2025-15592

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specifi...

Security Updates for Microsoft Word Products (April 2025)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

KB5055665: Servicing stack update for Windows Server 2012 R2: April 8, 2025

None None...

Critical Photon OS Security Update - PHSA-2025-4.0-0777

Updates of 'apache-tomcat9' packages of Photon OS have been released...

Security Updates for Microsoft SharePoint Server Subscription Edition (April 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-29793, CVE-2025-29794 %NASLMINLEVEL 70300 C Tenable, Inc...

Security Updates for Microsoft Office Online Server (April 2025)

The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Photon OS 5.0: Iperf PHSA-2025-5.0-0498

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0498. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

openSUSE Security Advisory (SUSE-SU-2025:1127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...