6035 matches found
SUSE SLED15: libQt5Bootstrap-devel-static / libQt5Bootstrap-devel-static-32bit / etc (SUSE-SU-2025:3723-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3723-1 advisory. Security issues fixed: - CVE-2025-5455: processing of malformed data in qDecodeDataUrl can trigg...
The CISO imperative: Building resilience in an era of accelerated cyberthreats
The latest Microsoft Digital Defense Report 2025 paints a vivid picture of a cyberthreat landscape in flux. The surge in financially motivated cyberattacks and the persistent risk of nation-state actors demand urgent attention. But for those of us in the Office of the Chief Information Security...
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: Security issues fixed: CVE-2025-5455: processing of malformed data in qDecodeDataUrl can trigger assertion and cause a crash bsc1243958. CVE-2025-30348: complex algorithm used in encodeText in QDom when processing XML data can cause low...
EUVD-2025-34897
Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorizationurl...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost version 5.13.0 and earlier, which stems from improper modal window management, and could allow an attacker to deny users access to a desktop application by...
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-55681
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
EUVD-2025-34373
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
EUVD-2025-34374
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
EUVD-2025-34402
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-55681
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-55681
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-59255 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-59254
Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...
CVE-2025-59254 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-58722
CVE-2025-58722 is a heap-based buffer overflow in Windows DWM that could enable a locally authenticated attacker to elevate privileges. The available connected documents confirm the affected component (Windows DWM) and the local privilege elevation impact, but do not provide concrete exploit deta...
CVE-2025-55681
CVE-2025-55681 is an out-of-bounds read vulnerability in Windows DWM (Desktop Window Manager) that allows an authenticated, locally-present attacker to elevate privileges. The connected EUVD-2025-34414 entry corroborates that the flaw is in the Windows DWM and leads to local privilege escalation....
