18708 matches found
CVE-2025-49545
Adobe ColdFusion is affected by CVE-2025-49545 (SSRF leading to arbitrary file system read) in versions 2025.2, 2023.14, 2021.20 and earlier. A high-privilege authenticated attacker can force the application to make arbitrary requests by URL injection; exploitation requires no user interaction an...
CVE-2025-49545 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of URLs. Exploitation...
USN-7627-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - ACPI drivers; - NILFS2 file system; - File systems infrastructure;...
CVE-2025-49694
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49694
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49693
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49693
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49677
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49677
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49693
Microsoft Brokering File System contains a double-free vulnerability (CVE-2025-49693) that could enable an authorized local attacker to elevate privileges. The CVE is documented with a 7.8 HIGH base score (local, low attack complexity) across multiple sources; no patch/version details are provide...
CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49721 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2025-49694
CVE-2025-49694 – Microsoft Brokering File System Elevation of Privilege. Description confirms a null pointer dereference that enables an authorized, local attacker to gain elevated privileges. CVSS v3.1 base score 7.8 ( HIGH ); attack vector LOCAL, privileges required LOW, user interaction NONE, ...
CVE-2025-49677
CVE-2025-49677 describes a use-after-free in Microsoft Brokering File System that enables local privilege escalation for an authorized user. The vulnerability is demonstrated by a PoC that yields an interactive SYSTEM shell via a scheduled task abuse, indicating a local attack vector with high im...
Microsoft Brokering File System Elevation of Privilege Vulnerability
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...