Lucene search
+L

50758 matches found

EUVD
EUVD
added 2025/12/31 6:59 a.m.10 views

EUVD-2025-205894

FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.1AI score0.00619EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/12/31 6:59 a.m.14 views

CVE-2025-15273

FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.6AI score0.00619EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 6:59 a.m.28 views

CVE-2025-15272

CVE-2025-15272 affects FontForge via a heap-based buffer overflow in SFD file parsing. The flaw stems from insufficient validation of the length of user-supplied data before copying into a heap buffer, enabling remote code execution in the context of the current user. Exploitation requires user i...

8.8CVSS7.2AI score0.00618EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/12/31 6:59 a.m.9 views

EUVD-2025-205895

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.1AI score0.00618EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/12/31 6:59 a.m.18 views

CVE-2025-15272

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.6AI score0.00618EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2025/12/31 6:58 a.m.15 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00619EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 6:58 a.m.4 views

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.7AI score0.00619EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2025/12/31 6:58 a.m.6 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00619EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 6:58 a.m.54 views

CVE-2025-15270

FontForge SFD File Parsing vulnerabilities (CVE-2025-15270) arise from improper validation of data while parsing SFD files, causing out-of-bounds writes and remote code execution. The connected Mageia advisory confirms a FontForge fix in updated packages; other sources describe the same issue and...

8.8CVSS7.2AI score0.00619EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/12/31 6:58 a.m.6 views

EUVD-2025-205897

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7AI score0.00619EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/12/31 6:58 a.m.5 views

CVE-2025-15269

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS7.6AI score0.00521EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 6:58 a.m.3 views

CVE-2025-15269 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.7AI score0.00521EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 6:58 a.m.38 views

CVE-2025-15269 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS0.00521EPSS
SaveExploits0References1
F5 Networks
F5 Networks
added 2025/12/31 5:49 a.m.12 views

K000158952: Intel UEFI vulnerability CVE-2025-35968

Security Advisory Description Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This resul...

7.1CVSS6.8AI score0.00115EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-15271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

8.8CVSS7.8AI score0.00619EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2025/12/30 12:00 a.m.13 views

(0Day) Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.3AI score0.00326EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/12/30 12:00 a.m.13 views

(0Day) Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu ShockLine. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of C...

7.8CVSS7.3AI score0.00308EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/12/29 12:00 a.m.10 views

(0Day) FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files...

8.8CVSS7.2AI score0.00619EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/12/29 12:00 a.m.8 views

(0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files...

8.8CVSS7.2AI score0.00618EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/12/29 12:00 a.m.6 views

(0Day) FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of scanlines...

7.8CVSS7.2AI score0.00284EPSS
SaveExploits0
Rows per page
Query Builder