firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape...

The vulnerability of the Intel RealSense D400 Series Universal Windows Platform (UWP) driver is related to an uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of the Intel RealSense D400 Series Universal Windows Platform UWP driver is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to gain increased privileges...

Mozilla Firefox ESR Security Update (mfsa_2025-16) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

LibreOffice Arbitrary Script Execution Vulnerability (Mar 2025) - Windows

LibreOffice is prone to an arbitrary script execution vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome Security Update (stable-channel-update-for-desktop_25-2025-02) - Windows

Google Chrome is prone to an Out of bounds read vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Python Untrusted Search Path Vulnerability (Feb 2025) - Windows

Python is prone to an untrusted search path vulnerability in the mimetypes standard library. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

CVE-2024-47006

Uncontrolled search path for the IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

CVE-2024-47006

Uncontrolled search path for the IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-47006

The CVE-2024-47006 is tied to the Intel RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows 10. Affected component: the UWP driver itself; root cause described as an uncontrolled search path. Impact: potential privilege escalation for an authenticated user with local access,...

GHSA-389X-839F-4RHX Denial of Service attack on windows app using Netty

Summary An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attemps to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. Details A similar issue was previousl...

Mozilla Firefox ESR Security Update (mfsa_2025-08) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

CVE-2024-45720

On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables e.g., svn.exe, etc. may lead to unexpected command line argument interpretation, including argument injection and execution of other programs, if a specially crafted command line...

CVE-2024-2548

A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the lollmscore/lollms/server/endpoints/lollmsbindingfilesserver.py and lollmscore/lollms/security.py files. Due to inadequate validation of file paths between Windows and Linux environments using...

MAL-2025-852 Malicious code in microsoft.netcore.universalwindowsplatform (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-5586 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 39378 Description: The issue is related to a local privilege escalation due to an unquoted search path vulnerability. This vulnerability affects the Acronis Cyber Protect Cloud...

CVE-2024-45077

IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system...

Django 4.x < 4.2.18, 5.0.x < 5.0.11, 5.1.x < 5.1.5 DoS Vulnerability - Windows

Django is prone to a denial of service DoS vulnerability in IPv6 validation. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-21343

Windows Web Threat Defense User Service Information Disclosure Vulnerability...

PT-2025-1089 · Microsoft · Mshtml +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to an incorrect path equivalence resolution in the MSHTML platform of Microsoft Windows operating systems. This can be exploited by a remote attacker to...