CVE-2025-21329: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21219: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

PT-2025-1104

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass vulnerability in the MapUrlToZone method, which is associated with incorrect path equivalence resolution. This could allow a remote attacker ...

PT-2025-1105

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass vulnerability in the MapUrlToZone method, which is associated with incorrect path equivalence resolution. This could allow a remote attacker ...

PT-2025-2454 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: FortiClientEMS versions 6.4.0 through 7.0.x FortiClientEMS versions 7.2.0 through 7.2.4 FortiClientEMS version 7.4.0 Description: The issue is related to an improper verification of the source of a communication channel, which may allow a...

CVE-2025-21269: Improper Resolution of Path Equivalence

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2025-21268: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21299: Insecure Storage of Sensitive Information

Windows Kerberos Security Feature Bypass Vulnerability...

CVE-2025-21346: Protection Mechanism Failure

Microsoft Office Security Feature Bypass Vulnerability...

CVE-2025-21211: Protection Mechanism Failure

Secure Boot Security Feature Bypass Vulnerability...

PT-2025-1221

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security-feature bypass vulnerability in the Secure Boot security component of the Windows operating system. This vulnerability is associated with a disruption in th...

CVE-2025-21189: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21340: Improper Access Control

Windows Virtualization-Based Security VBS Security Feature Bypass Vulnerability...

CVE-2025-21332: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

KLA78976 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

KLA78975 Multiple vulnerabilities in Microsoft Windows

Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution...

KLA78972 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service, spoof user interface. Below is a...

Security Updates for Microsoft Office Products (January 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity and availability of the system/application...

CVE-2024-56138

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was identified during Quarkslab's audit of the timestamp feature. During the timestamp signature generation, the revocation status of the certificates used to...

UBUNTU-CVE-2024-47796

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...