Cortex XDR Agent: Local Windows User Can Crash the Agent

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it. Work...

Fedora: Security Advisory (FEDORA-2025-31036092ea)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Excel 2016 Multiple Vulnerabilities (KB5002704)

This host is missing an important security update according to Microsoft KB5002704 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Access 2016 RCE Vulnerability (KB5002701)

This host is missing an important security update according to Microsoft KB5002701. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Office 2016 Multiple Vulnerabilities (KB5002700)

This host is missing an important security update according to Microsoft KB5002700 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Sante PACS Server Web Detection

Binary data santepacsserverwebdetect.nbin...

Microsoft Office 2016 RCE Vulnerability (KB4484432)

This host is missing an important security update according to Microsoft KB4484432 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

openSUSE Security Advisory (SUSE-SU-2025:1153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:1157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 2016 Elevation of Privilege Vulnerability (KB5002669)

This host is missing an important security update according to Microsoft KB5002669 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

openSUSE Security Advisory (SUSE-SU-2025:1162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-32026

creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd75664z72c...

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

CVE-2025-26679 RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

...

CVE-2025-26644

CVE-2025-26644 affects Windows Hello by allowing local spoofing due to inadequate handling of adversarial input perturbations. Microsoft documents a Windows Hello security fix path via monthly updates (e.g., KB5055528 for Windows 11 22621/22631; KB5055519 for older Windows builds) that enforces v...

CVE-2025-27442

creationtimestamp| type| source ---|---|--- 2025-04-08 11:28:40+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lmcenrnrjk2f 2025-04-08 16:46:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10949 2025-04-08 19:51:28+00:00| seen| https://t.me/cvedetector/22480 2025-04-12...

CVE-2025-26654

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10871 2025-04-08 09:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5cjxzha2g 2025-04-08 11:29:21+00:00| seen| https://t.me/cvedetector/22432...

Windows Hello Spoofing Vulnerability

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

CVE-2025-20946

creationtimestamp| type| source ---|---|--- 2025-04-08 05:47:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10853 2025-04-08 07:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114301239272400759 2025-04-08 08:06:58+00:00| seen|...

PT-2025-15499

Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: The issue concerns an automated recognition mechanism in Windows Hello that fails to adequately detect or handle adversarial input perturbations, allowing an unauthorized attacker to...