38637 matches found
CVE-2025-49726
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49725
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
PT-2025-29088 · Undefined · Undefined
CVE-2025-53747 Rejected reason https://t.co/df3bzZmSsr Vulnerability Notification: https://t.co/xhLrNnfyrO...
Alteryx Server cross-site scripting vulnerabilities
Alteryx Server is a cloud-hosted or self-hosted application from Alteryx, Inc. for publishing, sharing and executing workflows. A security vulnerability exists in Alteryx Server version 2023.1.1.460, which originates in the body of the notification and could allow a remote attacker to inject...
PT-2025-29130 · Alteryx · Alteryx Server
Name of the Vulnerable Software and Affected Versions: Alteryx Server version 2023.1.1.460 Description: A cross-site scripting XSS issue exists in Alteryx Server. This allows remote attackers to inject arbitrary web script or HTML through the notification body. Recommendations: Update Alteryx...
CVE-2025-28245: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix -anonvma race CVE-2023-52935 In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared count CVE-2024-57883 In the Linux kernel, the...
CVE-2025-28245
A Cross-site scripting (XSS) vulnerability exists in Alteryx Server version 2023.1.1.460 . The flaw originates in the notification body , where remote attackers can inject arbitrary web scripts or HTML. This could lead to unauthorized actions or content manipulation in the context of the user's s...
How To Automate Ticket Creation, Device Identification and Threat Triage With Tines
Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform’s Community Edition. A recent standout is a workflow that...
RHSA-2024:2298
creationtimestamp| type| source ---|---|--- 2025-07-09 08:16:39+00:00| seen| Telegram/FDPTZ6cw9blHY3T18UFm6VlFMkgiyOMhXsXmZIKIj8KOpg 2025-08-30 08:22:59+00:00| seen| Telegram/mNHg0ZUq3e6I4zp3mHjDmDkeOXe62GSMhJJSPLk8lRCLaAY...
CVE-2025-49725
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49726
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49726
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49725
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49725
Technical details beyond the short CVE description are not provided in the supplied documents. No product/version/patch specifics, exploit details, or remediation steps are available. Monitor official Microsoft advisories for patched versions and remediation guidance.
CVE-2025-49725 Windows Notification Elevation of Privilege Vulnerability
...
CVE-2025-49725 Windows Notification Elevation of Privilege Vulnerability
...
CVE-2025-49726 Windows Notification Elevation of Privilege Vulnerability
...
CVE-2025-49726
CVE-2025-49726 is a Windows vulnerability described as a use-after-free in Windows Notification that allows an authenticated local attacker to escalate privileges. The initial document provides a high-level impact (local, high confidentiality/integrity/availability impact) and does not reveal exp...