PT-2025-6690

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A defect was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. This lack of validation may lead to a heap...

PT-2025-6692

Name of the Vulnerable Software and Affected Versions Grub2 affected versions not specified Description A defect was found in Grub2 related to the handling of HFS+ filesystems. When Grub2 fails to mount an HFS+ filesystem, the hfsplus filesystem driver does not properly set an ERRNO value. This...

PT-2025-6317 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: An elevation-of-privilege issue in Windows Installer allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not specified. There ...

PT-2025-6341 · Microsoft · Visual Studio Code Js Debug Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code JS Debug Extension affected versions not specified Description: The issue concerns an elevation of privilege vulnerability in the JavaScript debugging extension of Visual Studio Code. Recommendations: At the moment, there i...

PT-2025-6305 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: An elevation-of-privilege issue affects the system, allowing attackers to gain elevated privileges. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-28685 · Irfanview +1 · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a memory corruption issue within the DWG File Parser component. Exploitation of this issue may allow an attacker to execute arbitrar...

PT-2025-28691 · Irfanview +1 · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in its DWG file parser component related to an out-of-bounds read memory error. Successful exploitation of this issue could...

PT-2025-28674 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The issue resides in the CADImage plugin for IrfanView, a graphics, video, and audio file viewer and player. The vulnerability is an out-of-bounds write in memory when...

PT-2025-6323 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office, Excel, and 365 Apps for Enterprise affected versions not specified Description: The issue is related to a memory out-of-bounds read. It may allow an attacker to disclose protected information. There is no information about t...

PT-2025-6188 · Siemens · Simatic Drive Controller Cpu 1504D Tf +39

Name of the Vulnerable Software and Affected Versions: Web server affected versions not specified Description: The login functionality of the web server does not normalize the response times of login attempts, allowing an unauthenticated remote attacker to exploit this side-channel information to...

PT-2025-6296 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is a remote code execution vulnerability in the Windows Telephony Service...

PT-2025-6335 · Microsoft · Windows Core Messaging +1

Name of the Vulnerable Software and Affected Versions: Windows Core Messaging affected versions not specified Description: An elevation-of-privilege issue affects the system, allowing attackers to exploit it. No information is provided about the estimated number of potentially affected devices...

PT-2025-6340 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue concerns an elevation of privilege vulnerability. No specific details about affected devices, real-world incidents, or technical exploitation details such as API...

PT-2025-6292 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension. There is no information provided about the estimated...

PT-2025-28686 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: A memory corruption issue exists in the DWG File Parser component of the CADImage plugin for IrfanView, a graphics, video, and audio file viewer and player. The issue is d...

PT-2025-6234 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection is mentioned, but no further details are provided about the issue. Recommendations: At the moment, there is no...

PT-2025-6332 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is a remote code execution vulnerability in the Windows Telephony Service...

PT-2025-6333 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-6299 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. It is related to the Windows Routing and Remote Access Service RRAS...

PT-2025-6293 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is a remote code execution vulnerability in the Windows Telephony Service...