CVE-2025-21281 Microsoft COM for Windows Elevation of Privilege Vulnerability

...

CVE-2025-21281 Microsoft COM for Windows Elevation of Privilege Vulnerability

...

CVE-2025-21272 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-21272 Windows COM Server Information Disclosure Vulnerability

...

Microsoft COM for Windows Elevation of Privilege Vulnerability

...

Windows COM Server Information Disclosure Vulnerability

...

PT-2025-1082

Name of the Vulnerable Software and Affected Versions Windows COM Server affected versions not specified Description The issue is related to the use of an uninitialized resource in the Windows COM Server, which can allow an attacker to gain unauthorized access to protected information. This is an...

PT-2025-4197

Name of the Vulnerable Software and Affected Versions Windows COM Server affected versions not specified Description The issue allows attackers to obtain sensitive information and affect the system. It is related to information disclosure. Recommendations At the moment, there is no information...

CVE-2025-21288: Use of Uninitialized Resource

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21272: Use of Uninitialized Resource

Windows COM Server Information Disclosure Vulnerability...

Microsoft Windows COM 安全漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A security vulnerability exists in Microsoft Windows COM...

Microsoft Windows COM 资源管理错误漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A resource management error vulnerability exists in...

CVE-2025-21281: Use After Free

Microsoft COM for Windows Elevation of Privilege Vulnerability...

CVE-2024-13139: Server-Side Request Forgery (SSRF)

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main/java/com/mysiteform/admin/controller/system/FileController. The manipulation of the argument content leads to server-side request forgery. The atta...

Topaz Signature Pad as COM Port Device Disappears after Logoff

Topaz Signature will disappear after users log off on a kiosk workstation. The environment contained: Citrix Virtual Apps and Desktops version 2203 CUx Desktop of Server VDA, any supported OS Citrix Workspace App 2402 CUx Windows 10/Windows 11...

PT-2024-36621 · Dtex · Dtex Dec-M

Name of the Vulnerable Software and Affected Versions: DTEX DEC-M DTEX Forwarder version 6.1.1 Description: An issue was discovered in the com.dtexsystems.helper service, which handles privileged operations within the macOS DTEX Event Forwarder agent. The service fails to implement critical clien...

PT-2024-36313 · Vk.Com · Vk.Com

Name of the Vulnerable Software and Affected Versions: Ilya Chekalskiy Like in Vk.com versions 0.5.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means that an attacker can inject...

WordPress Like in Vk.com plugin <= 0.5.2 - CSRF to Stored Cross-Site Scripting vulnerability

CSRF to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Like in Vk.com versions = 0.5.2...

Windows Tooling Updates: OleView.NET

Posted by James Forshaw, Google Project Zero This is a short blog post about some recent improvements I've been making to the OleView.NET tool which has been released as part of version 1.16. The tool is designed to discover the attack surface of Windows COM and find security vulnerabilities such...