The vulnerability of the Azure Active Directory identity management and protection platform, related to deserialization mechanism flaws, allows attackers to trigger a service failure.

The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Azure Active Directory identity management and protection platform, related to the execution of a loop with an unavailable exit condition, allows a perpetrator to trigger a service failure.

The vulnerability of the Azure Active Directory identity management and protection platform is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Mimecast Incydr 安全漏洞

Mimecast Incydr is a cloud-native internal risk management and data protection platform developed by Mimecast Corporation in the United States. Versions of Mimecast Incydr prior to version 2.6.0 contained security vulnerabilities that could lead to arbitrary file access...

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The former, tracked as CVE-2026-41091 , is rated 7.8 on the CVSS scoring system. Successful exploitation of the flaw could allow an attacker to gain SYSTEM...

IBM Guardium Data Protection 跨站脚本漏洞

IBM Guardium Data Protection is a data security and activity monitoring platform for database auditing, vulnerability assessment and compliance management. A cross-site scripting vulnerability exists in IBM Guardium Data Protection. The vulnerability stems from the failure of the Web UI to proper...

The Future of Cloud Security: A New Act for Cyber Risk Operations

Qualys, the leader in Cyber Risk Operations, is proud to be recognized in Latio Tech’s 2025 Cloud Security Market Report as a leader in both CTEM and the Cloud Security Ecosystem. This acknowledgement by Latio Tech reinforces the strength of our strategy—anchored by the industry’s first Risk...

Incident Response Team (ShieldForce) Partners with AccuKnox for Zero Trust CNAPP in Latin America

Menlo Park, CA, USA, 10th November 2025, CyberNewsWire...

The vulnerability of the Software Protection Platform Service (Sppsvc.exe) on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Software Protection Platform Service Sppsvc.exe on Windows operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2025-59199

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

EUVD-2025-34394

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

CVE-2025-59199

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

CVE-2025-59199

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

CVE-2025-59199 Software Protection Platform (SPP) Elevation of Privilege Vulnerability

...

CVE-2025-59199 Software Protection Platform (SPP) Elevation of Privilege Vulnerability

...

CVE-2025-59199

CVE-2025-59199 affects the Software Protection Platform (SPP). It is described as an improper access control vulnerability that allows a locally authenticated attacker to escalate privileges (CVSSv3.1 base score 7.8, HIGH; attack vector: LOCAL; privileges required: LOW; user interaction: NONE). T...

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

PT-2025-42091

Name of the Vulnerable Software and Affected Versions Software Protection Platform affected versions not specified Description Improper access control in the Software Protection Platform SPP, specifically within the Sppsvc.exe service, allows an authorized attacker to elevate privileges locally...

CVE-2025-59199: Improper Access Control

Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

CNAPP is the Solution to Multi-cloud Flexibility

Cloud-native application protection platform CNAPP not only helps organizations protect, but offers the flexibility of multi-cloud...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from an information disclosur...