1507 matches found
PT-2025-36865
Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A free of memory issue not on the heap in Microsoft Office Excel may allow an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to...
PT-2025-36872
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A free of memory issue not on the heap in Microsoft Office may allow an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to execute arbitrar...
PT-2025-36332
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network. Recommendations: At the moment,...
CVE-2025-55229
Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-55231
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an unauthorized attacker to execute code over a network...
CVE-2025-55229
CVE-2025-55229 concerns improper verification of cryptographic signatures in Windows Certificates, enabling a network attacker to spoof over the network. The primary root cause is flawed verification during certificate handling, with the CVSS data indicating network access, low attack complexity,...
CVE-2025-55231
CVE-2025-55231 describes a race condition in the Windows Storage-based Management Service where concurrent access to a shared resource is improperly synchronized, enabling a network-based attacker to potentially execute code. Affected component: Windows Storage-based Management Service (Windows S...
CVE-2025-53795
CVE-2025-53795 : Microsoft PC Manager has an improper authorization weakness that could let an unauthenticated attacker elevate privileges over the network. The CVE is documented across multiple feeds (NVD, Microsoft MSRC, Red Hat, CNNVD, PT- Security) with high-severity ratings (CVSS v3.1 base s...
Windows Certificate Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-20253
A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a DoS condition. This vulnerability is due to the improper processing of...
CVE-2025-25007
Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49745
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49736
The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-50171
Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-50158
Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...
CVE-2025-53761
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...
CVE-2025-53730
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...
CVE-2025-53738
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...