PT-2025-32798

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing affected versions not specified Description: A use-after-free issue exists in Windows Message Queuing that may allow an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no...

PT-2025-32834

Name of the Vulnerable Software and Affected Versions: Azure File Sync affected versions not specified Description: Improper access control in Azure File Sync can allow an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer...

PT-2025-32821 · Unknown +1 · Storage Port Driver +1

Name of the Vulnerable Software and Affected Versions: Storage Port Driver affected versions not specified Description: The Storage Port Driver is susceptible to a flaw that permits an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations: At the...

PT-2025-32799 · Microsoft · Windows Media +1

Name of the Vulnerable Software and Affected Versions: Windows Media affected versions not specified Description: A heap-based buffer overflow exists in Windows Media, potentially allowing an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no...

PT-2025-32733 · Intel · Intel Graphics Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers affected versions not specified Description: A NULL pointer dereference in some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At the...

PT-2025-32810

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing affected versions not specified Description: An issue exists in Windows Message Queuing related to access of a resource using an incompatible type, also known as a 'type confusion'. This allows an authorized attacker t...

PT-2025-32766 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The user interface performs an incorrect action, potentially allowing an unauthorized attacker to perform spoofing over a network. Recommendations: At the moment, there i...

CVE-2025-55149 Path Traversal Vulnerability in PDF Review Function (CWE-22)

Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research—from ideation to implementation, writing, and review. In versions 0.1.1 and below, a critical path traversal vulnerability has been identified in the reviewpaper function in backend/app.py. The...

Linux Distros Unpatched Vulnerability : CVE-2024-26590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: erofs: fix inconsistent per-file compression format EROFS can select compression algorithms ...

PT-2025-46764

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The v4l2 subdev call state try macro in the Linux kernel does not check the return value of v4l2 subdev state alloc. If v4l2 subdev state alloc fails, it returns an error pointer, which...

PT-2025-32396 · Unknown · Actfax Server

Name of the Vulnerable Software and Affected Versions: ActFax Server version 4.32 Description: A stack-based buffer overflow vulnerability exists in the "Import Users from File" functionality of the client interface. The application does not properly validate the length of tab-delimited fields in...

PT-2025-32316

Name of the Vulnerable Software and Affected Versions: Azure Portal affected versions not specified Description: An elevation of privilege issue exists within the Azure Portal. This allows for unauthorized access and potential compromise of resources. Recommendations: At the moment, there is no...

PT-2025-32315 · Microsoft · M365 Copilot

Name of the Vulnerable Software and Affected Versions: Microsoft 365 Copilot affected versions not specified Description: This issue involves information disclosure within the Microsoft 365 Copilot BizChat feature. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-32313

Name of the Vulnerable Software and Affected Versions: Azure OpenAI affected versions not specified Description: An elevation of privilege issue exists in Azure OpenAI. Successful exploitation could allow an attacker to gain elevated privileges. Recommendations: At the moment, there is no...

PT-2025-32312 · Ruby-Jwt +1 · Ruby-Jwt +1

Name of the Vulnerable Software and Affected Versions: ruby-jwt version 3.0.0.beta1 Description: ruby-jwt v3.0.0.beta1 contains weak encryption. The supplier notes that key size is not enforced by the library itself, and restrictions imposed by recent versions of OpenSSL may apply to users of the...

PT-2025-32240

Name of the Vulnerable Software and Affected Versions Himmelblau versions 0.8.0 through 0.9.21 Himmelblau versions 1.0.0-beta through 1.1.0 Description Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0 store...

PT-2025-32314

Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot affected versions not specified Description This issue involves an information disclosure within the Microsoft 365 Copilot BizChat feature. Recommendations At the moment, there is no information about a newer version that...

PT-2025-32130

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A memory corruption issue exists when handling client exceptions, potentially allowing unauthorized channel access. Recommendations At the moment, there is no information about a newer version that...

PT-2025-32075 · Unknown · Dma Module

Name of the Vulnerable Software and Affected Versions: DMA module affected versions not specified Description: An out-of-bounds read issue exists in the register configuration of the DMA module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the...

PT-2025-32139

Name of the Vulnerable Software and Affected Versions: Bluetooth Host affected versions not specified Description: A memory corruption issue exists while processing IOCTL commands with larger buffers in the Bluetooth Host. Recommendations: At the moment, there is no information about a newer...