6918 matches found
The vulnerability of the Desktop Window Manager (DVM) on Windows operating systems allows a hacker to escalate their privileges.
The vulnerability of the Desktop Window Manager DVM for Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
SUSE SLED15: libQt5Bootstrap-devel-static / libQt5Bootstrap-devel-static-32bit / etc (SUSE-SU-2025:3723-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3723-1 advisory. Security issues fixed: - CVE-2025-5455: processing of malformed data in qDecodeDataUrl can trigg...
The CISO imperative: Building resilience in an era of accelerated cyberthreats
The latest Microsoft Digital Defense Report 2025 paints a vivid picture of a cyberthreat landscape in flux. The surge in financially motivated cyberattacks and the persistent risk of nation-state actors demand urgent attention. But for those of us in the Office of the Chief Information Security...
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: Security issues fixed: CVE-2025-5455: processing of malformed data in qDecodeDataUrl can trigger assertion and cause a crash bsc1243958. CVE-2025-30348: complex algorithm used in encodeText in QDom when processing XML data can cause low...
The vulnerability of the Microsoft DWM Core Library on the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library in the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
EUVD-2025-34897
Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorizationurl...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost version 5.13.0 and earlier, which stems from improper modal window management, and could allow an attacker to deny users access to a desktop application by...
The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-55681
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
EUVD-2025-34373
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
EUVD-2025-34374
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
EUVD-2025-34402
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-58722
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-55681
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-55681
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2025-59254
Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...
