CVE-2025-26631 Visual Studio Code Elevation of Privilege Vulnerability

...

CVE-2025-24049 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

...

CVE-2025-24983 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

...

CVE-2025-24067 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2025-24067 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2025-24066 Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

CVE-2025-24050

CVE-2025-24050 describes a heap-based buffer overflow in the Windows Hyper-V role that enables a local privilege escalation for an authorized attacker (CVSSv3.1: LOCAL, Privileges Required: LOW, User Interaction: NONE; impact high for confidentiality, integrity, and availability). The connected d...

CVE-2025-24045 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

CVE-2025-21247

CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...

CVE-2025-21199 Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability

...

CVE-2025-24986

Azure PromptFlow components are affected by CVE-2025-24986: promptflow-core < 1.17.2 and promptflow-tools

CVE-2025-24044 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

...

CVE-2025-24992

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 20:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4ujkqaxr2n 2025-03-11 20:08:41+00:00| seen|...

CVE-2025-24055

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-31 02:30:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9566 2026-08-04 13:00:26+00:00| seen| https://t.me/bagl3ynotes/141...

CVE-2025-2192

creationtimestamp| type| source ---|---|--- 2025-03-11 14:05:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4af5u2w42m 2025-03-11 15:57:14+00:00| seen| https://t.me/cvedetector/20083...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-11187 DESCRIPTION: It is possible to construct a zone such that some queries ...

CVE-2025-25266

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 All versions V2302.0021, Tecnomatix Plant Simulation V2404 All versions V2404.0010. The affected application does not properly restrict access to the file deletion functionality. This could allow an unauthorized attacker to...

CVE-2025-27395

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and...

CVE-2025-23397

CVE-2025-23397 affects Siemens Teamcenter Visualization and Tecnomatix Plant Simulation. A memory corruption bug occurs while parsing WRL files, enabling code execution in the current process. Affected versions include Teamcenter Visualization: < V14.3.0.13, < V2312.0009, < V2406.0007, &...

CVE-2025-2175

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function vbistrndupiconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...