CVE-2025-27193: Heap-based Buffer Overflow

Bridge versions 14.1.5, 15.0.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-26674: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally...

CVE-2025-27195: Heap-based Buffer Overflow

Media Encoder versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-27196: Heap-based Buffer Overflow

Premiere Pro versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21205: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

CVE-2025-21221: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

CVE-2025-21222: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

PT-2025-15484

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is a heap-based buffer overflow that allows unauthorized attackers to execute code over a network. It enables remote attackers to execute arbitrary code and affe...

PT-2025-15483

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is a heap-based buffer overflow that allows unauthorized attackers to execute code over a network. It enables remote attackers to execute arbitrary code and affe...

CVE-2025-27477: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

CVE-2025-27487: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2025-26668: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

PT-2025-15510 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is a heap-based buffer overflow that allows an unauthorized attacker to execute code over a network, enabling remote attackers to execute...

Adobe Bridge 14.x < 14.1.6 / 15.x < 15.0.3 Vulnerability (APSB25-25)

The version of Adobe Bridge installed on the remote Windows host is prior to 14.1.6 or 15.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb25-25 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27193 Note that Nessu...

Adobe Bridge 14.x < 14.1.6 / 15.x < 15.0.3 Vulnerability (APSB25-25)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.6 or 15.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb25-25 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27193 Note...

Adobe Photoshop 25.x < 25.12.2 / 26.x < 26.5 Vulnerability (macOS APSB25-30)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 25.12.2/26.5. It is, therefore, affected by a vulnerability as referenced in the apsb25-30 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27198 Note...

Adobe Photoshop 25.x < 25.12.2 / 26.x < 26.5 Vulnerability (APSB25-30)

The version of Adobe Photoshop installed on the remote Windows host is prior to 25.12.2/26.5. It is, therefore, affected by a vulnerability as referenced in the apsb25-30 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27198 Note that Nessus...

Adobe FrameMaker 2020 < 16.0.8 (2020.0.8) / Adobe FrameMaker 2022 < 17.0.6 (2022.0.6) Multiple Vulnerabilities (APSB25-33)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.8 / Adobe FrameMaker 2022 17.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-33 advisory. - Out-of-bounds Write CWE-787 potentially leading to...

Adobe Animate 23.x < 23.0.11 / 24.x < 24.0.8 Multiple Vulnerabilities (APSB25-31)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.11 or 24.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-31 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-27200 - Heap-based...

About Elevation of Privilege – Windows Cloud Files Mini Filter Driver (CVE-2024-30085) vulnerability

About Elevation of Privilege - Windows Cloud Files Mini Filter Driver CVE-2024-30085 vulnerability. cldflt.sys is a Windows Cloud Files Mini Filter driver responsible for representing cloud-stored files and folders as if they were located on the local machine. The vulnerability in this driver,...