CVE-2025-64896

CVE-2025-64896 affects Creative Cloud Desktop versions 6.4.0.361 and earlier. The vulnerability is a Creation of Temporary File in Directory with Incorrect Permissions (CWE-379) that could cause application denial-of-service. Exploitation requires a user to open a malicious file, enabling local i...

CVE-2025-64896 Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by...

CVE-2025-64896 Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by...

CVE-2025-64680

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-64679 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-64679 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2025-64680 Windows DWM Core Library Elevation of Privilege Vulnerability

...

EUVD-2025-202202

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Exploit for CVE-2025-9074

CVE-2025-9074: Docker Desktop Container Escape PoC !CVEhtt...

PT-2025-50251

Name of the Vulnerable Software and Affected Versions Creative Cloud Desktop versions 6.4.0.361 and earlier Description The Creative Cloud Desktop application is susceptible to a flaw involving incorrect permissions when creating temporary files. This condition could allow an attacker to disrupt...

Adobe Creative Cloud Desktop 安全漏洞

Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...

PT-2025-50250

Name of the Vulnerable Software and Affected Versions Docker Desktop affected versions not specified Description Docker Desktop diagnostics bundles include expired Hub PATs Personal Access Tokens in log output because of error object serialization. This can lead to the leakage of sensitive...

Docker Desktop 安全漏洞

Docker Desktop is a desktop software for lightweight deployment of applications based on container technology from Docker Inc. in the United States. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

Microsoft Azure Virtual Desktop Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Azure Virtual Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2025-50206

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Windows DWM Core Library that could allow a local attacker to gain elevated privileges. The issue is a heap-based buffer overflow. This could allow an authorized attacker...

CVE-2025-13683

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0...

Linux Distros Unpatched Vulnerability : CVE-2025-32900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device,...

Linux Distros Unpatched Vulnerability : CVE-2025-66549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the...

EUVD-2025-201555

Malicious code in ssf-desktop-api-browser npm...

MAL-2025-192359 Malicious code in ssf-desktop-api-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5940c26ac6aa2f9c3682f4d383922757d2d5c361b5a70140ca289eabe304be8d The package ssf-desktop-api-browser was found to contain malicious code. Source: ossf-package-analysis...