PT-2025-46374

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework contains a flaw within the bert services component. An attacker could craft malicious data that leads to code injection. Exploitation of this issue may...

PT-2025-46506

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use after free issue exists in the Windows Ancillary Function Driver for WinSock. This flaw could allow an authorized attacker to gain elevated...

PT-2025-46509

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office. Exploitation of this issue could allow an unauthorized attacker to execute code locally. The issue involves the use of memory...

PT-2025-46510

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A race condition exists in the Windows Ancillary Function Driver for WinSock due to improper synchronization when handling concurrent execution with shared resources. This allows a locally...

PT-2025-46511

Name of the Vulnerable Software and Affected Versions Microsoft Wireless Provisioning System affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate...

PT-2025-46515

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An issue exists in Visual Studio Code CoPilot Chat Extension related to improper limitation of a pathname to a restricted directory, also known as a 'path...

PT-2025-46402

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description A protection mechanism failure exists in some IntelR NPU Drivers within Ring 3. This can allow a denial of service. An unprivileged software adversary with an authenticated user an...

PT-2025-46437

Name of the Vulnerable Software and Affected Versions UEFI firmware with Slim Bootloader affected versions not specified Description A flaw exists in the UEFI firmware for the Slim Bootloader that could allow for privilege escalation. A local attacker with privileged user access and high complexi...

PT-2025-46474

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue exists in the Windows Routing and Remote Access Service RRAS where an untrusted pointer dereference can occur. This allows an authorized attack...

PT-2025-46476

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A heap-based buffer overflow exists in Windows Routing and Remote Access Service RRAS. This allows an authorized attacker to execute code over a network...

PT-2025-46376

Name of the Vulnerable Software and Affected Versions NVIDIA AIStore affected versions not specified Description NVIDIA AIStore contains a security flaw in the Authentication AuthN component. A successful exploit of this issue may lead to escalation of privileges, information disclosure, and data...

PT-2025-46460

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw exists in Windows Routing and Remote Access Service RRAS related to improper link resolution before file access, specifically a 'link following'...

PT-2025-46377

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux and Windows affected versions not specified Description The NVIDIA Triton Inference Server is susceptible to a stack overflow condition triggered by the reception of excessively large payloads...

PT-2025-46477

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A flaw exists in Windows DirectX that can allow an attacker to gain higher-level access to a system. This issue involves a use-after-free condition, potentially enabling local privile...

PT-2025-46483

Name of the Vulnerable Software and Affected Versions OneDrive for Android affected versions not specified Description An improper limitation of a pathname to a restricted directory, known as a 'path traversal', exists in OneDrive for Android. This allows an authorized attacker to potentially...

PT-2025-46507

Name of the Vulnerable Software and Affected Versions Visual Studio affected versions not specified Description An issue exists in Visual Studio related to improper neutralization of special elements used in a command, potentially leading to command injection. An authorized attacker could exploit...

PT-2025-46520

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation could lead to arbitrary code execution with the privileges of the current...

PT-2025-46497

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel, potentially allowing an unauthorized attacker to locally disclose information. Recommendations At the moment, ther...

PT-2025-46502

Name of the Vulnerable Software and Affected Versions Windows License Manager affected versions not specified Description A flaw exists in Windows License Manager that allows an authorized attacker to disclose sensitive information locally through the insertion of this information into log files...

PT-2025-46480

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description An untrusted pointer dereference in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. A...