KLA86014 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

KLA86013 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the ANGLE library in Google Chrome browsers arises from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using a specially created HTML page...

KLA86016 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

KLA86011 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security bypass vulnerability in JavaScript engine can be...

Mozilla多款产品 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in several Mozilla products, whic...

KLA86012 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security bypass vulnerabili...

KLA86010 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Security...

The vulnerability of the Routing Engine module in Juniper Networks’ Junos OS Evolved operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the Routing Engine module in Juniper Networks’ Junos OS Evolved operating systems is related to the use of incorrect operators. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

VulnCheck KEV: CVE-2025-27505

GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API security and access the index page. The REST API security handles rest and its subpaths but not rest with an extension e.g., rest.html. The REST API index can...

KLA85945 ACE vulnerability in Microsoft Office

A remote code execution vulnerability was found in Microsoft SharePoint. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-53770 Related products Microsoft-SharePoint CVE list CVE-2025-53770 critical KB list 500275...

KLA85942 PE vulnerability in Microsoft Office

Privilege escalation vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2025-53762 Related products Microsoft-Office Microsoft-Outlook Microsoft-Excel Microsoft-Word...

KLA85944 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2025-47995 CVE-2025-49746 CVE-2025-49747 Related products Microsoft-Azure CVE list CVE-2025-47995 critical CVE-2025-4974...

PT-2025-29934 · Ibm · Ibm Websphere Application Server +1

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server affected versions not specified IBM WebSphere Liberty affected versions not specified Description: IBM WebSphere Application Server and WebSphere Liberty are affected by a security bypass vulnerability...

The vulnerability of the Consul and Consul Enterprise service configuration tool, related to unvalidated returned values, allows attackers to circumvent established security restrictions.

The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an unvalidated returned value. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions from a remote location...

The vulnerability of the BitLocker data protection function in Microsoft Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the BitLocker data protection function in Microsoft Windows operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

RT-Thread Input Validation Error Vulnerability (CNVD-2025-16524)

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...

Adobe ColdFusion Improper Authorization Vulnerability

Adobe ColdFusion is a dynamic Web server platform maintained by Adobe. An improper authorization vulnerability exists in Adobe ColdFusion, which can be exploited by an attacker to submit a special request to bypass security restrictions and gain unauthorized access to the system...

KLA85871 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VM VirtualBox. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution...

CVE-2025-52985

A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security restrictions. When a firewall filter which is applied to the lo0 or re:mgmt interface references a prefix list with...