6284 matches found
PT-2025-42116
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A type confusion issue in Microsoft Office Excel allows unauthorized code execution locally. Exploitation involves accessing a resource using an incompatible type. This can lea...
CVE-2025-59223: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2025-42069
Name of the Vulnerable Software and Affected Versions Inbox COM Objects affected versions not specified Description A use after free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...
CVE-2025-59238: Use After Free
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...
PT-2025-42108
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use after free condition exists in Microsoft Office Excel that could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...
CVE-2025-59236: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2025-41963
Name of the Vulnerable Software and Affected Versions FortiClientMac versions 7.0 through 7.2.11 FortiClientMac versions 7.4.0 through 7.4.3 Description An incorrect permission assignment for a critical resource may allow a local attacker to run arbitrary code or commands via LaunchDaemon...
CVE-2025-59227: Use After Free
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
PT-2025-42070
Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information abo...
CVE-2025-59226: Use After Free
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...
PT-2025-42112
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use-after-free condition exists in Microsoft Office. This occurs when a program attempts to use memory after it has been freed, resulting in unpredictable behavior. Exploitation of...
CVE-2025-59282: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...
PT-2025-42072
Name of the Vulnerable Software and Affected Versions Inbox COM Objects affected versions not specified Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...
PT-2025-42119
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...
CVE-2025-59234: Use After Free
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
Security Updates for Microsoft Office Online Server (October 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities. - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2025-59223, CVE-2025-59224, CVE-2025-5922...
HPESBHF04954 rev.2 - HPE Compute Scale-up Server 3200 Platform, HPE Superdome Flex and HPE Superdome Flex 280 servers, Security Bypass Vulnerability
Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.65.60 HPE Superdome Flex 280 Server - Prior to v2.05.12 HPE Superdome Flex Server - Prior to v4.15.08 CVSS Scores: | CVE | CVSS...
OESA-2025-2388 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...
CVE-2025-21058
Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege...
