PT-2025-15623 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2025-15616 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 25.12.1, 26.4.1 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

PT-2025-15610 · Adobe · Premiere Pro

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 25.1, 24.6.4 and earlier Description: A Heap-based Buffer Overflow issue could result in arbitrary code execution in the context of the current user. To exploit this issue, user interaction is required, where a...

PT-2025-15516 · Microsoft · Windows Media +1

Name of the Vulnerable Software and Affected Versions: Windows Media affected versions not specified Description: The issue is a heap-based buffer overflow that allows an attacker to execute code locally. It also enables remote attackers to execute arbitrary code and affect the system...

PT-2025-15510 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is a heap-based buffer overflow that allows an unauthorized attacker to execute code over a network, enabling remote attackers to execute...

PT-2025-15537 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: A heap-based buffer overflow issue allows an authorized attacker to elevate privileges locally. This elevation-of-privilege issue can be exploited by attackers ...

Adobe FrameMaker 2020 < 16.0.8 (2020.0.8) / Adobe FrameMaker 2022 < 17.0.6 (2022.0.6) Multiple Vulnerabilities (APSB25-33)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.8 / Adobe FrameMaker 2022 17.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-33 advisory. - Out-of-bounds Write CWE-787 potentially leading to...

Adobe Animate 23.x < 23.0.11 / 24.x < 24.0.8 Multiple Vulnerabilities (APSB25-31)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.11 or 24.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-31 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-27200 - Heap-based...

Adobe Photoshop 25.x < 25.12.2 / 26.x < 26.5 Vulnerability (macOS APSB25-30)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 25.12.2/26.5. It is, therefore, affected by a vulnerability as referenced in the apsb25-30 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27198 Note...

Adobe Bridge 14.x < 14.1.6 / 15.x < 15.0.3 Vulnerability (APSB25-25)

The version of Adobe Bridge installed on the remote Windows host is prior to 14.1.6 or 15.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb25-25 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27193 Note that Nessu...

Adobe Photoshop 25.x < 25.12.2 / 26.x < 26.5 Vulnerability (APSB25-30)

The version of Adobe Photoshop installed on the remote Windows host is prior to 25.12.2/26.5. It is, therefore, affected by a vulnerability as referenced in the apsb25-30 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27198 Note that Nessus...

Adobe Bridge 14.x < 14.1.6 / 15.x < 15.0.3 Vulnerability (APSB25-25)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.6 or 15.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb25-25 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-27193 Note...

About Elevation of Privilege – Windows Cloud Files Mini Filter Driver (CVE-2024-30085) vulnerability

About Elevation of Privilege - Windows Cloud Files Mini Filter Driver CVE-2024-30085 vulnerability. cldflt.sys is a Windows Cloud Files Mini Filter driver responsible for representing cloud-stored files and folders as if they were located on the local machine. The vulnerability in this driver,...

CVE-2025-3159

A flaw has been found in the Open Asset Import Library assimp. In affected versions, a malformed ASE file may trigger a heap-based buffer overflow, which may lead to an application crash or other undefined behavior...

CVE-2025-3159

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buff...

CVE-2025-3159 Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buff...

CVE-2025-3158

CVE-2025-3158 affects Open Asset Import Library Assimp 5.4.3, specifically the LWO File Handler: Assimp::LWO::AnimResolver::UpdateAnimRangeSetup, where a heap-based overflow in LWOAnimation.cpp is triggered. Attack can be launched locally on the host; the exploit has been disclosed publicly. Publ...

CVE-2025-3158

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation...

Medium: iniparser

Issue Overview: Heap-based Buffer Overflow vulnerability in iniparserdumpsectionini in iniparser allows attacker to read out of bound memory CVE-2025-0633 Affected Packages: iniparser Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the differenc...

Amazon Linux 2 : iniparser (ALAS-2025-2809)

The version of iniparser installed on the remote host is prior to 3.1-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2809 advisory. Heap-based Buffer Overflow vulnerability in iniparserdumpsectionini in iniparser allows attacker to read out of bound memory...