28433 matches found
CVE-2025-37147
A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware o...
CVE-2025-48813 Virtual Secure Mode Spoofing Vulnerability
...
CVE-2025-48813 Virtual Secure Mode Spoofing Vulnerability
...
CVE-2025-48813
Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.
CVE-2025-37147
CVE-2025-37147 describes a Secure Boot Bypass affecting ArubaOS Aruba Access Points, allowing bypass of the hardware root of trust verification and enabling execution of modified or custom firmware. The vulnerability is supported by multiple sources in the Connected documents, which identify the ...
CVE-2025-37147 Secure Boot Bypass allows for Compromise of Hardware Root of Trust
A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware o...
CVE-2025-37147 Secure Boot Bypass allows for Compromise of Hardware Root of Trust
A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware o...
CVE-2024-26008
An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3...
DEBIAN-CVE-2025-0033
Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity...
CVE-2025-0033
Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity...
October 14, 2025—KB5066873 (Monthly Rollup)
None None...
October 14, 2025—KB5066872 (Monthly Rollup)
None None...
October 14, 2025—KB5066876 (Security-only update)
None None...
September 9, 2025—KB5065426 (OS Build 26100.6584)
None None...
September 9, 2025—KB5065429 (OS Builds 19044.6332 and 19045.6332)
None None...
Virtual Secure Mode Spoofing Vulnerability
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band
None None...
October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services
None None...