CVE-2025-29968

Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...

The vulnerability of the Active Directory Certificate Services (AD CS) service, which manages the distribution and usage of certificates, allows a perpetrator to cause a service failure.

The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and utilization of certificates on Windows operating systems, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-32756link is external Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability These types of vulnerabilities are frequent attack vectors for malicio...

PT-2025-21215 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is an issue that is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2025-27717

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the coresight subsystem. The issue allowed for a potential use-after-free UAF scenario when deactivating an active...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of a security measure - Execution of arbitrary code root/admin privileges - Execution...

CVE-2025-29968

Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...

CVE-2025-29968 Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

...

CVE-2025-29968 Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

...

CVE-2025-29968

Technical details (affected product/versions, root cause, impact, exploit info, and fixes) are not provided in the connected documents. Based on the supplied sources, only the basic description and CVSS metrics are available. Monitor for updates.

kernel: net/mlx5: fs, lock FTE when checking if active

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and unlock the FTE. - Lock...

kernel: SUNRPC: make sure cache entry active before cache_show

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cacheshow The function cshow was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger...

Active Directory Certificate Services (AD CS) Denial of Service Vulnerability

Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...

PT-2025-20940 · Microsoft · Defender For Identity

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Identity affected versions not specified Description: The issue is related to improper authentication in Microsoft Defender for Identity, allowing an unauthorized attacker to perform spoofing over an adjacent network...

PT-2025-20971 · Microsoft · Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to deny service over a network. This can affect the system, leadin...

Microsoft Active Directory Certificate Services 输入验证错误漏洞

Microsoft Active Directory Certificate Services is a Windows Server role that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Active...

PT-2025-21010

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description The issue is related to a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock, which allows an authorized attacker to eleva...

[SECURITY] Fedora 41 Update: php-adodb-5.22.9-1.fc41

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

[SECURITY] Fedora 42 Update: php-adodb-5.22.9-1.fc42

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

CVE-2025-20154

A vulnerability in the Two-Way Active Measurement Protocol TWAMP server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service DoS condition. For Cisco IOS XR Software, this...