USN-7627-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - ACPI drivers; - NILFS2 file system; - File systems infrastructure;...

CVE-2025-49694

Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49693

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49693

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49694

Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49677

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49677

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-49693

Microsoft Brokering File System contains a double-free vulnerability (CVE-2025-49693) that could enable an authorized local attacker to elevate privileges. The CVE is documented with a 7.8 HIGH base score (local, low attack complexity) across multiple sources; no patch/version details are provide...

CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-49721 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-49694

CVE-2025-49694 – Microsoft Brokering File System Elevation of Privilege. Description confirms a null pointer dereference that enables an authorized, local attacker to gain elevated privileges. CVSS v3.1 base score 7.8 ( HIGH ); attack vector LOCAL, privileges required LOW, user interaction NONE, ...

CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2025-49677

CVE-2025-49677 describes a use-after-free in Microsoft Brokering File System that enables local privilege escalation for an authorized user. The vulnerability is demonstrated by a PoC that yields an interactive SYSTEM shell via a scheduled task abuse, indicating a local attack vector with high im...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-49538: XML Injection (aka Blind XPath Injection)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this issue by injecting crafted XML or XPath queries to access unauthorized files or lead to denial of service. Exploitati...

PT-2025-28745 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is related to an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this problem by injecting crafted XML or XPath...