Lucene search
+L

189 matches found

OSV
OSV
added 2025/12/31 7:15 a.m.9 views

UBUNTU-CVE-2025-15280

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS6.2AI score0.00565EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/31 7:15 a.m.18 views

UBUNTU-CVE-2025-15275

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.8AI score0.00564EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/31 7:15 a.m.8 views

CVE-2025-15272

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.5AI score0.00563EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/31 6:59 a.m.2 views

CVE-2025-15276 FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.8AI score0.00319EPSS
SaveExploits1References1
CVE
CVE
added 2025/12/31 6:59 a.m.29 views

CVE-2025-15276

CVE-2025-15276 affects FontForge through a flaw in parsing SFD files that enables deserialization of untrusted data, leading to remote code execution. The issue arises from insufficient validation during SFD parsing, allowing an attacker to run code in the target’s process. Exploitation requires ...

7.8CVSS7.3AI score0.00319EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/12/31 6:59 a.m.47 views

CVE-2025-15276 FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.00319EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2025/12/31 6:59 a.m.12 views

CVE-2025-15276

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.9AI score0.00319EPSS
SaveExploits1
EUVD
EUVD
added 2025/12/31 6:59 a.m.11 views

EUVD-2025-205890

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.1AI score0.00319EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/31 6:59 a.m.10 views

CVE-2025-15276 FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.6AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2025/12/31 6:59 a.m.8 views

CVE-2025-15276

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.7AI score0.00319EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/12/31 6:59 a.m.7 views

CVE-2025-15280 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.7AI score0.00565EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 6:59 a.m.12 views

EUVD-2025-205891

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS7AI score0.00565EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/12/31 6:59 a.m.20 views

CVE-2025-15280

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS7.6AI score0.00565EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 6:59 a.m.20 views

CVE-2025-15280

CVE-2025-15280 describes a use-after-free in FontForge’s SFD file parsing. The flaw arises from not validating the existence of an object before performing operations during SFD parsing, enabling remote code execution in the context of the current user. Attacks require user interaction (target vi...

8.8CVSS7.2AI score0.00565EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2025/12/31 6:59 a.m.14 views

CVE-2025-15280

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.4AI score0.00565EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2025/12/31 6:59 a.m.4 views

CVE-2025-15275

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.6AI score0.00564EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 6:59 a.m.2 views

CVE-2025-15275 FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS8.7AI score0.00564EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 6:59 a.m.2 views

EUVD-2025-205892

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.1AI score0.00564EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/12/31 6:59 a.m.9 views

CVE-2025-15275

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS8.4AI score0.00564EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/12/31 6:59 a.m.34 views

CVE-2025-15275 FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS0.00564EPSS
SaveExploits0References1
Rows per page
Query Builder