CVE-2025-70888

The osslsigncode software (specifically versions v2.10 and before ) contains a vulnerability in the osslsigncode.c component that allows a remote attacker to escalate privileges. The root causes include integer overflows during APPX compressed data stream processing, double-free vulnerabilities i...