PT-2025-21085 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: The issue is related to a use after free condition that may allow an unauthenticated user to potentially enable denial of service via adjacent access. This...

PT-2025-20908 · Ivanti · Ivanti Neurons For Itsm

Name of the Vulnerable Software and Affected Versions: Ivanti Neurons for ITSM versions prior to 2023.4 Ivanti Neurons for ITSM versions 2024.2 Ivanti Neurons for ITSM versions 2024.3 Description: An authentication bypass in Ivanti Neurons for ITSM allows a remote unauthenticated attacker to gain...

PT-2025-21057 · Intel · Intel Arc +1

Name of the Vulnerable Software and Affected Versions: IntelR Arc™ and IrisR Xe graphics software versions prior to 32.0.101.6077 Description: The issue is related to improper access control for some IntelR Arc™ and IrisR Xe graphics software. This may allow an authenticated user to potentially...

PT-2025-21053 · Intel · Intel Arc & Iris Xe Graphics

Name of the Vulnerable Software and Affected Versions: IntelR Arc™ & IrisR Xe graphics software versions prior to 31.0.101.4032 Description: The issue is related to improper access control in some IntelR Arc™ & IrisR Xe graphics software, which may allow an authenticated user to potentially enabl...

ALSA-2025:7425 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

Intel® RealSense™ SDK Software Advisory

Summary: Potential security vulnerabilities for some Intel® RealSense™ SDK software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20095 Description: Incorrect Default Permissions for some...

Intel® Simics® Package Manager Software Advisory

Summary: Potential security vulnerabilities in some Intel® Simics® Package Manager software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20008 Description: Insecure...

Intel® Ethernet Connections Boot Utility Software Advisory

Summary: A potential security vulnerability in the Intel® Ethernet Connections Boot Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20015 Description: Uncontrolled search path...

Intel® oneAPI Level Zero Advisory

Summary: A potential security vulnerability in some Intel® oneAPI Level Zero software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-31073 Description: Uncontrolled search path for some Intel®...

Intel® Ethernet Network Adapter E810 Series Advisory

Summary: A potential security vulnerability in some Non-Volatile Memory NVM Update Utility for Intel® Ethernet Network Adapter E810 Series may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20629...

Intel® QAT Software Advisory

Summary: A potential security vulnerability for some Intel® QuickAssist Technology Intel® QAT software for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39833 Description: Uncontrolle...

Intel® Gaudi® Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Gaudi® software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-45067 Description: Incorrect default permissions in some...

Intel® oneAPI DPC++/C++ Compiler Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01243.html...

PT-2025-21092 · Intel · Intel Realsense Sdks

Name of the Vulnerable Software and Affected Versions: IntelR RealSense™ SDK versions prior to 2.56.2 Description: The issue concerns incorrect default permissions for some IntelR RealSense™ SDK software, which may allow an authenticated user to potentially enable escalation of privilege via loca...

PT-2025-21120 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an improper input validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged...

PT-2025-21078 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: A race condition in some IntelR PROSet/Wireless WiFi Software for Windows may allow an unauthenticated user to potentially enable denial of service via...

PT-2025-21023 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Bridge versions 15.0.3, 14.1.6 and earlier Description: The issue is an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-23068 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: FortiClient Mac versions 7.0.0 through 7.0.14 FortiClient Mac versions 7.2.0 through 7.2.8 FortiClient Mac versions 7.4.0 through 7.4.2 Description: The issue is related to an Incorrect Authorization vulnerability that may allow a local...

PT-2025-23070 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.2.0 through 7.2.7 Fortinet FortiOS versions 7.0.0 through 7.0.14 Description: The issue is related to an integer overflow or wraparound that may allow a remote unauthenticated attacker to crash the csfd daemon via ...

PT-2025-20928 · Unknown +1 · Openpubkey +1

Name of the Vulnerable Software and Affected Versions: OpenPubkey library versions prior to 0.10.0 OPKSSH versions prior to 0.5.0 Description: The issue allows a specially crafted JWS to bypass signature verification. This affects OPKSSH as it depends on the OpenPubkey library for authentication,...