PT-2025-32836

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A use-after-free vulnerability exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability can be triggered by opening a...

PT-2025-32858

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use-after-free condition exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. This can occur when opening a specially crafte...

PT-2025-32835 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: A use-after-free issue exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-32797

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: An issue exists in the Graphics Kernel where access of a resource using an incompatible type 'type confusion' can allow an authorized attacker to execute code locally...

CVE-2025-53773: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally...

CVE-2025-53740: Use After Free

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53737: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53730: Use After Free

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-48807: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-53784: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-53734: Use After Free

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

PT-2025-32847

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: The software contains a use of uninitialized resource issue. This allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-32843

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specifi...

Siemens COMOS

SUMMARY COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure,...

CVE-2025-8851

A stack based buffer overflow flaw has been discovered in libTIFF. An attacker with local access may be able to craft input to the readSeparateStripsetoBuffer function in the file tools/tiffcrop.c that triggers this flaw. This issue could allow an attacker to achieve local code execution in the...

CVE-2025-27128

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-24298

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-24298 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-24298 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-24298

CVE-2025-24298 relates to OpenHarmony, affecting v5.0.3 and earlier where a use-after-free in the trusted computing base (tcb) enables a local attacker to achieve arbitrary code execution. The vulnerability is locally exploitable due to tcb’s post-release reuse issue, with impact on confidentiali...