28151 matches found
Disk Arbitration Privilege Escalation
The vulnerability of the Disk Arbitration framework in macOS operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2025-54874 vulnerabilities
Vulnerabilities for packages: openjpeg...
CVE-2025-25256
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute...
CVE-2025-27759
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code o...
CVE-2024-26009
An authentication bypass using an alternate path or channel CWE-288 vulnerability in Fortinet FortiOS version 6.4.0 through 6.4.15 and before 6.2.16, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8 and before 7.0.15 & FortiPAM before version 1.2.0 allows an unauthenticated attacker to...
CVE-2025-27759
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code o...
CVE-2024-26009
CVE-2024-26009 describes an authentication bypass in Fortinet products (FortiOS, FortiProxy, FortiPAM) exploitable via FGFM requests when the device is managed by FortiManager and the attacker knows the FortiManager serial number. Affected: FortiOS 6.4.0–6.4.15 and before 6.2.16; FortiProxy 7.4.0...
CVE-2025-53789
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-50169
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB allows an unauthorized attacker to execute code over a network...
CVE-2025-53789 Windows StateRepository API Server file Elevation of Privilege Vulnerability
...
CVE-2025-53720 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
CVE-2025-53152 Desktop Windows Manager Remote Code Execution Vulnerability
...
CVE-2025-53141 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-53141 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2025-53136 NT OS Kernel Information Disclosure Vulnerability
...
CVE-2025-50166 Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability
...
CVE-2025-50160 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
GHSA-G4PX-6QHM-HQJM vulnerabilities
Vulnerabilities for packages: wildfly...
August 12, 2025—KB5063878 (OS Build 26100.4946) for Windows
August 12, 2025—KB5063878 OS Build 26100.4946 for Windows Applies To Windows 11 version 24H2, all editions Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...
