CVE-2025-49536 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of...

CVE-2025-49536

The CVE-2025-49536 issue affects Adobe ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier and is an Incorrect Authorization vulnerability that can bypass security features. A low-privileged attacker could bypass security checks and gain unauthorized access without user interaction, with exp...

CVE-2025-49539

CVE-2025-49539 concerns Adobe ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier affected by an XML External Entity (XXE) vulnerability that can bypass security features and leak sensitive information. The issue is caused by improper restriction of XML external entities, enabling a high-pri...

CVE-2025-49539 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information...

CVE-2025-49740

Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-49740

Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-48818

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-48001

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-48003

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-49740 Windows SmartScreen Security Feature Bypass Vulnerability

...

CVE-2025-49740 Windows SmartScreen Security Feature Bypass Vulnerability

...

CVE-2025-49740

CVE-2025-49740 is a protection mechanism failure in Windows Defender SmartScreen that can allow an unauthenticated attacker to bypass the SmartScreen protection over the network. This vulnerability affects the SmartScreen security feature in Windows and can lead to executing or delivering untrust...

CVE-2025-48818 Windows BitLocker Security Feature Bypass Vulnerability

...

CVE-2025-48814 Remote Desktop Licensing Service Security Feature Bypass Vulnerability

...

CVE-2025-48814 Remote Desktop Licensing Service Security Feature Bypass Vulnerability

...

CVE-2025-48814

Technical details about CVE-2025-48814 (affected product/version, exploit specifics, and remediation) are not provided in the connected documents. Monitor official updates from Microsoft/NVD for concrete details and fixes.

CVE-2025-48804 Windows BitLocker Security Feature Bypass Vulnerability

...

CVE-2025-48800 Windows BitLocker Security Feature Bypass Vulnerability

...

CVE-2025-48800 Windows BitLocker Security Feature Bypass Vulnerability

...

CVE-2025-48003

CVE-2025-48003 is a Windows BitLocker security feature bypass vulnerability described as a protection mechanism failure that allows an unauthorized attacker to bypass a security feature with a physical attack. The connected documents do not provide concrete technical details such as root cause, a...