Security Bulletin: NVIDIA CUDA Toolkit - February 2025

NVIDIA has released a software update for NVIDIA® CUDA® Toolkit. To protect your system, download and install this software update from the CUDA Toolkit Downloads page. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update...

The vulnerability of the command-line interface (CLI) of the Fortinet FortiClient security device allows a hacker to escalate their privileges.

The vulnerability of the CLI interface of the Fortinet FortiClient security device for Windows relates to access control violations. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

PSF-2025-2

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

CVE-2024-33863

An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion...

CVE-2024-33867

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt...

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2025-21367

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...

CVE-2025-21376

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (ksthunk.sys) in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Zoom Workplace Apps for Windows Elevation of Privilege Vulnerability

Zoom Workplace Apps for Windows is a professional video conferencing client, built for enterprise meetings, that is mobile and cloud-based. Zoom Workplace Apps for Windows suffers from an elevation of privilege vulnerability that stems from an untrusted search path in the installer. No details of...

PT-2025-23640

Name of the Vulnerable Software and Affected Versions Jupyter Core versions prior to 5.8.0 Description The issue affects Jupyter Core on Windows, where the shared %PROGRAMDATA% directory is searched for configuration files, potentially allowing users to create files that impact other users. This ...

CVE-2024-39372

Uncontrolled search path for the IntelR XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-41168

Use after free in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-40887

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39606

Improper input validation in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39606

CVE-2024-39606 affects Intel PROSet/Wireless WiFi and Killer WiFi software for Windows prior to version 23.80. The root cause is improper input validation, which can allow an unauthenticated attacker to trigger denial of service via adjacent access. Intel’s advisory and related documents indicate...

CVE-2024-39365

Uncontrolled search path for the FPGA Support Package for the IntelR oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39365

Uncontrolled search path for the FPGA Support Package for the IntelR oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39372

Uncontrolled search path for the IntelR XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access...