KLA89243 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read/write...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An information disclosure vulnerability exists in Microsoft Windows, which can be exploited by an attacker to obtain sensitive information...

Microsoft Windows Kernel 信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to obtain sensitive information...

Microsoft Windows 日志信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A log information disclosure vulnerability exists in Microsoft Windows State Repository API Server, which can be exploited by an attacker to obtain sensitive information...

PT-2025-42101

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Push Notification Core that allows an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to an unauthoriz...

Microsoft Windows Kernel 信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to obtain sensitive information...

PT-2025-42135

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An issue exists in Active Directory Federation Services where sensitive information is inserted into log files. This allows a local attacker to disclose...

Microsoft Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel, which can be exploited by attackers to obtain sensitive information...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An information disclosure vulnerability exists in Microsoft Windows Push Notification, which can be exploited by an attacker to obtain sensitive information...

PT-2025-42078

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists in the Windows Kernel that allows an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to an unauthorized...

Microsoft Windows Kernel 信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to obtain sensitive information...

Microsoft Windows Kernel 信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to obtain sensitive information...

PT-2025-42049

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A flaw exists in the Windows Kernel that could allow an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to an unauthorized...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An information disclosure vulnerability exists in Microsoft Windows, which can be exploited by an attacker to obtain sensitive information...

PT-2025-42145

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A flaw exists in Microsoft Windows related to NTLM authentication, potentially allowing an unauthorized attacker to perform spoofing locally. This issue involves the parsing of TAR...

Microsoft多款产品 加密问题漏洞

Microsoft Visual Studio and others are products of Microsoft Corporation, U.S.A. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, Microsoft .NET Framework is a comprehensive and consistent programming model, and a development...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows Storage Management Provider, which can be exploited by an attacker to obtain sensitive information...

Microsoft Windows Push Notifications 信息泄露漏洞

Microsoft Windows Push Notifications is a push notification service from Microsoft Corporation USA. It provides a reliable way to deliver new updates. Microsoft Windows Push Notifications suffers from an information disclosure vulnerability that stems from an attacker's ability to obtain sensitiv...

Insertion of Sensitive 2FA Information in logs and debug command

...

PT-2025-41860

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A cleartext transmission of sensitive information allows an unauthorized remote attacker to gain login credentials and access the Web-UI. The vulnerability is due to the absence of proper encryption ...