CVE-2025-1052: Heap-based Buffer Overflow

Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2025-21414: Heap-based Buffer Overflow

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21407: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21369: Heap-based Buffer Overflow

Microsoft Digest Authentication Remote Code Execution Vulnerability...

CVE-2025-21368: Heap-based Buffer Overflow

Microsoft Digest Authentication Remote Code Execution Vulnerability...

CVE-2025-21418: Heap-based Buffer Overflow

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2025-21410: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2025-21390: Heap-based Buffer Overflow

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2025-21371: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21208: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2025-21200: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21190: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21184: Heap-based Buffer Overflow

Windows Core Messaging Elevation of Privileges Vulnerability...

Adobe InDesign < 19.5.2 / 20.0 < 20.1.0 Multiple Vulnerabilities (APSB25-01) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.2, 20.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-01 advisory. - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow Wrap or...

Azure Linux 3.0 Security Update: rsync (CVE-2024-12084)

The version of rsync installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12084 advisory. - A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32620)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32620 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting ...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32612)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32612 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c,...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32623)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32623 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32621)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32621 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from...

CVE-2025-22880: Heap-based Buffer Overflow

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...