1779 matches found
Windows Kernel Information Disclosure Vulnerability
Integer underflow wrap or wraparound in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network...
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
PT-2025-20938
Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service affected versions not specified Description: The issue is related to uncontrolled resource consumption in the Remote Desktop Gateway Service, allowing an unauthorized attacker to deny service over a network. Thi...
KB5058379: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (May 2025)
The remote Windows host is missing security update 5058379. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...
Microsoft Windows Scripting Engine Type Confusion Vulnerability
Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL...
CVE-2025-47733
Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...
CVE-2025-33072
Improper access control in Azure allows an unauthorized attacker to disclose information over a network...
CVE-2025-29825
CVE-2025-29825 affects Microsoft Edge (Chromium-based). The flaw is a UI misrepresentation that enables a remote attacker to spoof UI over a network, requiring user interaction. Impact per the metrics is Confidentiality High, with no impacts to Integrity/Availability reported. The CVSS 3.1 vector...
CVE-2025-46628
Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shell access to the device by sending a crafted UDP packet to the 'ate' service when it is enabled. Authentication is not needed...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-30391
Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network...
CVE-2025-30389
CVE-2025-30389 describes an improper authorization issue in the Azure Bot Framework SDK that allows an unauthenticated, network-based attacker to elevate privileges. The NVD entry lists a CRITICAL impact with CVSSv3.1: AV=N, AC=L, PR=NONE, UI=N, S=U, C=H, I=H, A=H (base score 9.8). Microsoft/Red ...
VulnCheck KEV: CVE-2025-24054
Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network...
Security Updates for Microsoft Office Products (April 2025) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the april-15-2025 advisory. - Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network. CVE-2025-2981...
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2025-29834
Out-of-bounds read in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2025-29834
Out-of-bounds read in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2025-21203
Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...