CVE-2025-6632 PSD File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-46388

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-20697

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795...

CVE-2025-20697

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795...

PT-2025-31794 · Power Hal · Power Hal

Name of the Vulnerable Software and Affected Versions: Power HAL affected versions not specified Description: Power HAL contains a possible out-of-bounds write due to a missing bounds check. Successful exploitation of this issue could lead to local privilege escalation if an attacker already...

Frozen in transit: Secret Blizzard’s AiTM campaign against diplomats

Microsoft Threat Intelligence has uncovered a cyberespionage campaign by the Russian state actor we track as Secret Blizzard that has been targeting embassies located in Moscow using an adversary-in-the-middle AiTM position to deploy their custom ApolloShadow malware. ApolloShadow has the...

CVE-2025-7497

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-6636 PRT File Parsing Use-After-Free Vulnerability

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-6631

CVE-2025-6631 concerns a parsing vulnerability in Autodesk products that process PRT files. A maliciously crafted PRT file can trigger an Out-of-Bounds Write in the affected software, potentially crashing the application, causing data corruption, or allowing arbitrary code execution within the cu...

The vulnerability of the MongoDB database management system’s server allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system server is related to excessive iteration. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware

The threat actor behind the exploitation of vulnerable Craft Content Management System CMS instances has shifted its tactics to target Magento CMS and misconfigured Docker instances. The activity has been attributed to a threat actor tracked as Mimo aka Hezb, which has a long history of leveragin...

CVE-2025-5042 RFA File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5042

CVE-2025-5042 concerns Autodesk Revit. A maliciously crafted RFA file parsed by Revit can trigger an Out-of-Bounds Read, potentially crashing the process, reading sensitive data, or executing arbitrary code in the current process context. This is evidenced across multiple connected sources descri...

CVE-2025-46382

Technical details about CVE-2025-46382 are not publicly provided in the supplied documents; no specific affected product/version or remediation is confirmed. Monitor for updates.

CVE-2025-46382

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-48496

Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors...

The vulnerability of the Apache Kafka message dispatcher, related to deserialization mechanism flaws, allows attackers to trigger a service failure.

The vulnerability of the Apache Kafka message broker is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

CVE-2025-49664

Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally...

CVE-2025-47980

Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally...

CVE-2025-47980

Technical details about CVE-2025-47980 (affected product/components, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates as more information becomes public.