PT-2025-41876

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This could allow for remote proximal/adjacent escalation of privilege without...

PT-2025-41868

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw that allows for a potential out-of-bounds write due to an incorrect bounds check. This issue could lead to remote proximal/adjacent escalation of...

CVE-2025-61805: Out-of-bounds Read

Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

PT-2025-42177

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions 2020.9 through 2022.7 Description A Use After Free issue exists in Adobe Framemaker. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is required...

PT-2025-42178

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions 2020.9 through 2022.7 Description Adobe Framemaker versions 2020.9, 2022.7, and earlier are susceptible to a Heap-based Buffer Overflow issue. Successful exploitation of this issue could lead to arbitrary code executi...

PT-2025-42188

Name of the Vulnerable Software and Affected Versions Dimension versions 4.1.4 and earlier Description The software is susceptible to an out-of-bounds read issue when processing a specially crafted file. This could allow a read past the end of an allocated memory structure. An attacker could...

PT-2025-42171

Name of the Vulnerable Software and Affected Versions Substance3D - Viewer versions 0.25.2 and earlier Description An out-of-bounds write vulnerability exists in Substance3D - Viewer versions 0.25.2 and earlier. Successful exploitation of this issue could allow an attacker to execute arbitrary co...

CVE-2025-20712: Heap-based Buffer Overflow

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID:...

PT-2025-42203

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists in Adobe Connect. A high-privileged attacker could exploit this to execute malicious scripts in a victim’s browser. Exploitation requires a...

PT-2025-42204

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description The software is susceptible to a DOM-based Cross-Site Scripting XSS issue. Successful exploitation could allow an attacker to execute malicious scripts in a victim’s browser, potentially...

PT-2025-42192

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description An Integer Overflow or Wraparound issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User...

PT-2025-42207

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...

CVE-2025-20709: Buffer Copy without Checking Size of Input

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415809; Issue ID:...

CVE-2025-54275: Out-of-bounds Write

Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to crash the application or make it unavailable. Exploitation of this issue requires user interacti...

PT-2025-42187

Name of the Vulnerable Software and Affected Versions Dimension versions 4.1.4 and earlier Description Dimension versions 4.1.4 and earlier are susceptible to an out-of-bounds read issue when processing a specially crafted file. This can lead to reading beyond the boundaries of allocated memory. ...

PT-2025-41867

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This could allow for remote proximal/adjacent escalation of privilege without...

PT-2025-41875

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw involving an incorrect bounds check, potentially leading to an out-of-bounds write. Successful exploitation of this issue could allow for remote...

PT-2025-42200

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...

CVE-2025-54266: Improper Neutralization of Input During Web Page Generation

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...

CVE-2025-54281: Use After Free

Adobe Framemaker versions 2020.9, 2022.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...