EUVD-2025-34430

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2025-48004 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

USN-7808-2: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Ext4 file system; - SMB network file system; - Packet sockets; - Network traffic control; - TLS...

USN-7808-2 linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Ext4 file system; - SMB network file system; - Packet sockets; - Network traffic control; - TLS...

CVE-2025-22832 Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability...

CVE-2025-22831

CVE-2025-22831 affects AMI AptioV BIOS. The vulnerability is a local, in-BIOS Out-of-bounds Write that can be triggered by an attacker with local access, causing data corruption and loss of availability. Exploitation details are not provided in the supplied documents; no patch/version remediation...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Resilient File System ReFS allows an unauthorized attacker to elevate privileges locally...

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-9063

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs,...

EUVD-2025-34185

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs,...

CVE-2025-9063

CVE-2025-9063 concerns an authentication bypass in the FactoryTalk View Machine Edition Web Browser ActiveX control, enabling an unauthenticated attacker on the same network to gain access to the PanelView Plus 7 Series B file system, diagnostic information, and event logs. Connected sources conf...

CVE-2025-9063 Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs,...

CVE-2025-9063 Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs,...

kernel: sunrpc: fix handling of server side tls alerts

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tlsalertrecv due to its assumption it can read data from the msg iterator's kvec.. kTLS implementation splits TLS non-da...

PT-2025-42037

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A race condition exists due to improper synchronization when concurrent processes access shared resources within Windows Resilient File System ReFS. This allows an...

PT-2025-41995

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free condition exists in the Microsoft Brokering File System component. This allows an unauthorized attacker to elevate privileges locally. A use-after-fre...