DirectX Disclosure Protected Information

The vulnerability of the DirectX component in Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology in Windows operating systems is related to a significant loss of functionality. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Routing and Remote Access Service RCE

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

Projected File System Privilege Escalation

The vulnerability of the Projected File System component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2025-64153

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized...

CVE-2025-53949

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated...

CVE-2025-12945 Improper input validation in NETGEAR Nighthawk router R7000P

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P end of service routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting it...

CVE-2025-5471

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

CVE-2025-41692

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm...

CVE-2025-5471 Dylib Hijacking in Yandex Telemost

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

CVE-2025-41692 Weak/Predictable root Password

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm...

November 11, 2025—Hotpatch KB5068840 (OS Build 20348.4346)

None None...

Microsoft Windows Cloud Files Mini Filter Driver security vulnerability

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and version...

Fortinet FortiSandbox operating system command injection vulnerability

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from US-based Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. An operating system command injection vulnerability exists in Fortine...

Microsoft Windows DirectX Resource Management Error Vulnerability

Microsoft Windows DirectX is a DirectX end-user runtime Web installer from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows DirectX. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

Microsoft Windows Routing and Remote Access Service security vulnerabilities

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

Microsoft Windows Installer input validation error vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. An input validation error vulnerability exists in Microsoft Windows Installer. An attacker could exploit the...

Selea Targa IP OCR-ANPR Camera: Operating System Command Injection Vulnerability

Selea Targa IP OCR-ANPR Camera is an IP camera from Selea. The Selea Targa IP OCR-ANPR Camera suffers from an operating system command injection vulnerability that stems from a command injection issue with the addr and port parameters in utils.php, which could lead to the execution of arbitrary...

Fortinet FortiExtender operating system command injection vulnerability

Fortinet FortiExtender is a wireless WAN wide area network extender device from Fortinet, Inc. An operating system command injection vulnerability exists in Fortinet FortiExtender versions 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, all versions of 7.2, and all versions of 7.0, which originates fro...