# CVEs published 2025-08-12

353 CVEs were published on August 12, 2025: 14 critical, 164 high. Days are UTC.

- [CVE-2025-49457](https://cve.now/CVE-2025-49457.md): Zoom Clients for Windows - Untrusted Search Path (CVSS 9.6, Zoom Communications Zoom Clients for Windows)
- [CVE-2025-49456](https://cve.now/CVE-2025-49456.md): Zoom Clients for Windows- Race Condition (CVSS 6.2, Zoom Communications Zoom Clients for Windows)
- [CVE-2025-54238](https://cve.now/CVE-2025-54238.md): Dimension | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Dimension)
- [CVE-2025-54233](https://cve.now/CVE-2025-54233.md): Adobe Framemaker | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Framemaker)
- [CVE-2025-54230](https://cve.now/CVE-2025-54230.md): Adobe Framemaker | Use After Free (CWE-416) (CVSS 7.8, Adobe Framemaker)
- [CVE-2025-54232](https://cve.now/CVE-2025-54232.md): Adobe Framemaker | Use After Free (CWE-416) (CVSS 7.8, Adobe Framemaker)
- [CVE-2025-54231](https://cve.now/CVE-2025-54231.md): Adobe Framemaker | Use After Free (CWE-416) (CVSS 7.8, Adobe Framemaker)
- [CVE-2025-54229](https://cve.now/CVE-2025-54229.md): Adobe Framemaker | Use After Free (CWE-416) (CVSS 7.8, Adobe Framemaker)
- [CVE-2025-54222](https://cve.now/CVE-2025-54222.md): Substance3D - Stager | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2025-54216](https://cve.now/CVE-2025-54216.md): InCopy | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54217](https://cve.now/CVE-2025-54217.md): InCopy | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54215](https://cve.now/CVE-2025-54215.md): InCopy | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54218](https://cve.now/CVE-2025-54218.md): InCopy | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54223](https://cve.now/CVE-2025-54223.md): InCopy | Use After Free (CWE-416) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54219](https://cve.now/CVE-2025-54219.md): InCopy | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54221](https://cve.now/CVE-2025-54221.md): InCopy | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54220](https://cve.now/CVE-2025-54220.md): InCopy | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-54211](https://cve.now/CVE-2025-54211.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54207](https://cve.now/CVE-2025-54207.md): InDesign Desktop | Access of Uninitialized Pointer (CWE-824) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54214](https://cve.now/CVE-2025-54214.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2025-54224](https://cve.now/CVE-2025-54224.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54213](https://cve.now/CVE-2025-54213.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54210](https://cve.now/CVE-2025-54210.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54225](https://cve.now/CVE-2025-54225.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54209](https://cve.now/CVE-2025-54209.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54208](https://cve.now/CVE-2025-54208.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54227](https://cve.now/CVE-2025-54227.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2025-54228](https://cve.now/CVE-2025-54228.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2025-54226](https://cve.now/CVE-2025-54226.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54212](https://cve.now/CVE-2025-54212.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-54206](https://cve.now/CVE-2025-54206.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-55165](https://cve.now/CVE-2025-55165.md): Autocaliweb Exposure of Sensitive Information to an Unauthorized Actor in \`config\_sql.py\` (CVSS 8.3, gelbphoenix autocaliweb)
- [CVE-2025-54205](https://cve.now/CVE-2025-54205.md): Substance3D - Sampler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Sampler)
- [CVE-2025-54188](https://cve.now/CVE-2025-54188.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-54193](https://cve.now/CVE-2025-54193.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-54194](https://cve.now/CVE-2025-54194.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-54187](https://cve.now/CVE-2025-54187.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2025-54190](https://cve.now/CVE-2025-54190.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-54191](https://cve.now/CVE-2025-54191.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-54195](https://cve.now/CVE-2025-54195.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-54189](https://cve.now/CVE-2025-54189.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-54192](https://cve.now/CVE-2025-54192.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2025-49573](https://cve.now/CVE-2025-49573.md): Substance3D - Modeler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Modeler)
- [CVE-2025-49572](https://cve.now/CVE-2025-49572.md): Substance3D - Modeler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Modeler)
- [CVE-2025-54197](https://cve.now/CVE-2025-54197.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54186](https://cve.now/CVE-2025-54186.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54235](https://cve.now/CVE-2025-54235.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54203](https://cve.now/CVE-2025-54203.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54200](https://cve.now/CVE-2025-54200.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54204](https://cve.now/CVE-2025-54204.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-49571](https://cve.now/CVE-2025-49571.md): Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427) (CVSS 7.8, Adobe Substance3D - Modeler)
- [CVE-2025-54202](https://cve.now/CVE-2025-54202.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54199](https://cve.now/CVE-2025-54199.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54201](https://cve.now/CVE-2025-54201.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-54198](https://cve.now/CVE-2025-54198.md): Substance3D - Modeler | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Modeler)
- [CVE-2025-49570](https://cve.now/CVE-2025-49570.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Photoshop Desktop)
- [CVE-2025-49562](https://cve.now/CVE-2025-49562.md): Animate | Use After Free (CWE-416) (CVSS 5.5, Adobe Animate)
- [CVE-2025-49561](https://cve.now/CVE-2025-49561.md): Animate | Use After Free (CWE-416) (CVSS 7.8, Adobe Animate)
- [CVE-2025-55171](https://cve.now/CVE-2025-55171.md): WeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint \`/html/personalizacao\_remover.php\` (CVSS 7.5, LabRedesCefetRJ WeGIA)
- [CVE-2025-55170](https://cve.now/CVE-2025-55170.md): WeGIA reflected XSS via \`verificacao\` and \`redir\_config\` param at endpoint \`/html/alterar\_senha.php\` (CVSS 6.5, LabRedesCefetRJ WeGIA)
- [CVE-2025-49569](https://cve.now/CVE-2025-49569.md): Substance3D - Viewer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Viewer)
- [CVE-2025-49560](https://cve.now/CVE-2025-49560.md): Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance3D - Viewer)
- [CVE-2025-36000](https://cve.now/CVE-2025-36000.md): IBM WebSphere Application Server Liberty cross-site scripting (CVSS 4.4, IBM WebSphere Application Server Liberty)
- [CVE-2025-55169](https://cve.now/CVE-2025-55169.md): WeGIA Path Traversal at endpoint 'html/socio/sistema/download\_remessa.php' via parameter 'file' (CVSS 10.0, LabRedesCefetRJ WeGIA)
- [CVE-2024-48892](https://cve.now/CVE-2024-48892.md): A relative path traversal vulnerability \[CWE-23\] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an au (CVSS 6.4, Fortinet FortiSOAR)
- [CVE-2025-47857](https://cve.now/CVE-2025-47857.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability \[CWE-78\] in Fortinet FortiWeb CLI (CVSS 6.5, Fortinet FortiWeb)
- [CVE-2025-32932](https://cve.now/CVE-2025-32932.md): An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability \[CWE-79\] in FortiSOAR version 7.6.1 an (CVSS 6.2, Fortinet FortiSOAR)
- [CVE-2025-27759](https://cve.now/CVE-2025-27759.md): An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability \[CWE-78\] in Fortinet FortiWeb ve (CVSS 6.7, Fortinet FortiWeb)
- [CVE-2024-26009](https://cve.now/CVE-2024-26009.md): An authentication bypass using an alternate path or channel \[CWE-288\] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 (CVSS 7.9, Fortinet FortiProxy · Fortinet FortiOS +2)
- [CVE-2024-52964](https://cve.now/CVE-2024-52964.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability \[CWE-22\] in Fortinet FortiManager version 7. (CVSS 5.2, Fortinet FortiManager)
- [CVE-2025-25248](https://cve.now/CVE-2025-25248.md): An Integer Overflow or Wraparound vulnerability \[CWE-190\] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and be (CVSS 4.8, Fortinet FortiOS · Fortinet FortiPAM +1)
- [CVE-2023-45584](https://cve.now/CVE-2023-45584.md): A double free vulnerability \[CWE-415\] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, Fo (CVSS 6.3, Fortinet FortiProxy · Fortinet FortiOS +1)
- [CVE-2025-52970](https://cve.now/CVE-2025-52970.md): A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7. (CVSS 7.7, Fortinet FortiWeb)
- [CVE-2025-53744](https://cve.now/CVE-2025-53744.md): An incorrect privilege assignment vulnerability \[CWE-266\] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 a (CVSS 6.8, Fortinet FortiOS)
- [CVE-2025-49813](https://cve.now/CVE-2025-49813.md): An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability \[CWE-78\] in Fortinet FortiADC ve (CVSS 6.6, Fortinet FortiADC)
- [CVE-2025-32766](https://cve.now/CVE-2025-32766.md): A stack-based buffer overflow vulnerability \[CWE-121\] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privile (CVSS 6.3, Fortinet FortiWeb)
- [CVE-2025-25256](https://cve.now/CVE-2025-25256.md): An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability \[CWE-78\] vulnerability in Fortin (CVSS 9.8, Fortinet FortiSIEM)
- [CVE-2024-40588](https://cve.now/CVE-2024-40588.md): Multiple relative path traversal vulnerabilities \[CWE-23\] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCa (CVSS 4.2, Fortinet FortiCamera · Fortinet FortiNDR +3)
- [CVE-2025-55168](https://cve.now/CVE-2025-55168.md): WeGIA SQL Injection via id\_fichamedica at endpoint \`GET /html/saude/aplicar\_medicamento.php\` (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-43734](https://cve.now/CVE-2025-43734.md): A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q (CVSS 5.1, Liferay Portal · Liferay DXP +3)
- [CVE-2025-36124](https://cve.now/CVE-2025-36124.md): IBM WebSphere Application Server Liberty bypass security (CVSS 5.9, IBM WebSphere Application Server Liberty)
- [CVE-2025-49556](https://cve.now/CVE-2025-49556.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.5, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-49557](https://cve.now/CVE-2025-49557.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7, Adobe Commerce · magento/community-edition +1)
- [CVE-2025-49558](https://cve.now/CVE-2025-49558.md): Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) (CVSS 5.9, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-49554](https://cve.now/CVE-2025-49554.md): Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-49559](https://cve.now/CVE-2025-49559.md): Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-49555](https://cve.now/CVE-2025-49555.md): Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) (CVSS 8.1, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-20044](https://cve.now/CVE-2025-20044.md): Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of (CVSS 5.6, Intel(R) TDX Module firmware)
- [CVE-2025-49736](https://cve.now/CVE-2025-49736.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3, Microsoft Edge for Android)
- [CVE-2025-49712](https://cve.now/CVE-2025-49712.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2025-49707](https://cve.now/CVE-2025-49707.md): Azure Virtual Machines Spoofing Vulnerability (CVSS 7.9, Microsoft DCadsv5-series Azure VM · Microsoft DCasv5-ser… +9)
- [CVE-2025-49755](https://cve.now/CVE-2025-49755.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3, Microsoft Edge for Android)
- [CVE-2025-48807](https://cve.now/CVE-2025-48807.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2025-53793](https://cve.now/CVE-2025-53793.md): Azure Stack Hub Information Disclosure Vulnerability (CVSS 7.5, Microsoft Azure Stack Hub)
- [CVE-2025-53789](https://cve.now/CVE-2025-53789.md): Windows StateRepository API Server file Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53788](https://cve.now/CVE-2025-53788.md): Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Subsystem for Linux)
- [CVE-2025-53784](https://cve.now/CVE-2025-53784.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-53783](https://cve.now/CVE-2025-53783.md): Microsoft Teams Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Teams for Android · Microsoft Teams for Desktop +6)
- [CVE-2025-53779](https://cve.now/CVE-2025-53779.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Windows Server)
- [CVE-2025-53778](https://cve.now/CVE-2025-53778.md): Windows NTLM Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2025-50155](https://cve.now/CVE-2025-50155.md): Windows Push Notifications Apps Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-50157](https://cve.now/CVE-2025-50157.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-53769](https://cve.now/CVE-2025-53769.md): Windows Security App Spoofing Vulnerability (CVSS 5.5, Microsoft Windows Security App)
- [CVE-2025-53766](https://cve.now/CVE-2025-53766.md): GDI+ Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Office for Android · Microsoft Office for Univ… +1)
- [CVE-2025-53765](https://cve.now/CVE-2025-53765.md): Azure Stack Hub Information Disclosure Vulnerability (CVSS 4.4, Microsoft Azure Stack Hub)
- [CVE-2025-53740](https://cve.now/CVE-2025-53740.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-53739](https://cve.now/CVE-2025-53739.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-53738](https://cve.now/CVE-2025-53738.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2025-53737](https://cve.now/CVE-2025-53737.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-53736](https://cve.now/CVE-2025-53736.md): Microsoft Word Information Disclosure Vulnerability (CVSS 6.8, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2025-53735](https://cve.now/CVE-2025-53735.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-53734](https://cve.now/CVE-2025-53734.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-53733](https://cve.now/CVE-2025-53733.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2025-53732](https://cve.now/CVE-2025-53732.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office for Android · Microsoft Office for Univers…)
- [CVE-2025-53731](https://cve.now/CVE-2025-53731.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-47954](https://cve.now/CVE-2025-47954.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server)
- [CVE-2025-53728](https://cve.now/CVE-2025-53728.md): Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Dynamics 365 (on-premises))
- [CVE-2025-53726](https://cve.now/CVE-2025-53726.md): Windows Push Notifications Apps Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53725](https://cve.now/CVE-2025-53725.md): Windows Push Notifications Apps Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53724](https://cve.now/CVE-2025-53724.md): Windows Push Notifications Apps Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53723](https://cve.now/CVE-2025-53723.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53722](https://cve.now/CVE-2025-53722.md): Windows Remote Desktop Services Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2025-53721](https://cve.now/CVE-2025-53721.md): Windows Connected Devices Platform Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53720](https://cve.now/CVE-2025-53720.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-53719](https://cve.now/CVE-2025-53719.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-53718](https://cve.now/CVE-2025-53718.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53716](https://cve.now/CVE-2025-53716.md): Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2025-53156](https://cve.now/CVE-2025-53156.md): Windows Storage Port Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-53155](https://cve.now/CVE-2025-53155.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53154](https://cve.now/CVE-2025-53154.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53153](https://cve.now/CVE-2025-53153.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-53152](https://cve.now/CVE-2025-53152.md): Desktop Windows Manager Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53151](https://cve.now/CVE-2025-53151.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53149](https://cve.now/CVE-2025-53149.md): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53148](https://cve.now/CVE-2025-53148.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-53147](https://cve.now/CVE-2025-53147.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53145](https://cve.now/CVE-2025-53145.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2025-53144](https://cve.now/CVE-2025-53144.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2025-53143](https://cve.now/CVE-2025-53143.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2025-53142](https://cve.now/CVE-2025-53142.md): Microsoft Brokering File System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53141](https://cve.now/CVE-2025-53141.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53140](https://cve.now/CVE-2025-53140.md): Windows Kernel Transaction Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53138](https://cve.now/CVE-2025-53138.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-53137](https://cve.now/CVE-2025-53137.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53136](https://cve.now/CVE-2025-53136.md): NT OS Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-53135](https://cve.now/CVE-2025-53135.md): DirectX Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53134](https://cve.now/CVE-2025-53134.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-53133](https://cve.now/CVE-2025-53133.md): Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53132](https://cve.now/CVE-2025-53132.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-53131](https://cve.now/CVE-2025-53131.md): Windows Media Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2025-50177](https://cve.now/CVE-2025-50177.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2025-50176](https://cve.now/CVE-2025-50176.md): DirectX Graphics Kernel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-50173](https://cve.now/CVE-2025-50173.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Multimedia Redirection Installer · Microsoft Wind…)
- [CVE-2025-50172](https://cve.now/CVE-2025-50172.md): DirectX Graphics Kernel Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2025-50171](https://cve.now/CVE-2025-50171.md): Remote Desktop Spoofing Vulnerability (CVSS 9.1, Microsoft Windows)
- [CVE-2025-50170](https://cve.now/CVE-2025-50170.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-50169](https://cve.now/CVE-2025-50169.md): Windows SMB Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2025-50168](https://cve.now/CVE-2025-50168.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-50167](https://cve.now/CVE-2025-50167.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-50166](https://cve.now/CVE-2025-50166.md): Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2025-50165](https://cve.now/CVE-2025-50165.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2025-50164](https://cve.now/CVE-2025-50164.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-50163](https://cve.now/CVE-2025-50163.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-50162](https://cve.now/CVE-2025-50162.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-50161](https://cve.now/CVE-2025-50161.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2025-50160](https://cve.now/CVE-2025-50160.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-50159](https://cve.now/CVE-2025-50159.md): Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2025-50158](https://cve.now/CVE-2025-50158.md): Windows NTFS Information Disclosure Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-50156](https://cve.now/CVE-2025-50156.md): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-50154](https://cve.now/CVE-2025-50154.md): Microsoft Windows File Explorer Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2025-50153](https://cve.now/CVE-2025-50153.md): Desktop Window Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-49762](https://cve.now/CVE-2025-49762.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-49761](https://cve.now/CVE-2025-49761.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-49759](https://cve.now/CVE-2025-49759.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2025-49757](https://cve.now/CVE-2025-49757.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-49743](https://cve.now/CVE-2025-49743.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2025-25007](https://cve.now/CVE-2025-25007.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.3, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2025-25006](https://cve.now/CVE-2025-25006.md): Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.3, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2025-25005](https://cve.now/CVE-2025-25005.md): Microsoft Exchange Server Tampering Vulnerability (CVSS 6.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2025-53781](https://cve.now/CVE-2025-53781.md): Azure Virtual Machines Information Disclosure Vulnerability (CVSS 7.7, Microsoft DCadsv5-series Azure VM · Microsoft DCasv5-ser… +9)
- [CVE-2025-53773](https://cve.now/CVE-2025-53773.md): GitHub Copilot and Visual Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio)
- [CVE-2025-53772](https://cve.now/CVE-2025-53772.md): Web Deploy Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Web Deploy)
- [CVE-2025-24999](https://cve.now/CVE-2025-24999.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2025-53761](https://cve.now/CVE-2025-53761.md): Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2025-53760](https://cve.now/CVE-2025-53760.md): Microsoft SharePoint Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2025-53759](https://cve.now/CVE-2025-53759.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-53741](https://cve.now/CVE-2025-53741.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-53730](https://cve.now/CVE-2025-53730.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-33051](https://cve.now/CVE-2025-33051.md): Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 7.5, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2025-53729](https://cve.now/CVE-2025-53729.md): Microsoft Azure File Sync Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure File Sync)
- [CVE-2025-53727](https://cve.now/CVE-2025-53727.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2025-49758](https://cve.now/CVE-2025-49758.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2025-49745](https://cve.now/CVE-2025-49745.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2025-49751](https://cve.now/CVE-2025-49751.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2025-49563](https://cve.now/CVE-2025-49563.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator)
- [CVE-2025-49568](https://cve.now/CVE-2025-49568.md): Illustrator | Use After Free (CWE-416) (CVSS 5.5, Adobe Illustrator)
- [CVE-2025-49564](https://cve.now/CVE-2025-49564.md): Illustrator | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Illustrator)
- [CVE-2025-49567](https://cve.now/CVE-2025-49567.md): Illustrator | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Illustrator)
- [CVE-2024-33607](https://cve.now/CVE-2024-33607.md): Out-of-bounds read in some Intel(R) TDX module software before version TDX\_1.5.07.00.774 may allow an authenticated user to potentially enab (CVSS 5.7, Intel(R) TDX module software)
- [CVE-2025-32086](https://cve.now/CVE-2025-32086.md): Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX (CVSS 4.5, Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or In…)
- [CVE-2025-32004](https://cve.now/CVE-2025-32004.md): Improper input validation in the Intel Edger8r Tool for some Intel(R) SGX SDK may allow an authenticated user to potentially enable escalati (CVSS 1.8, Intel(R) SGX SDK)
- [CVE-2025-27717](https://cve.now/CVE-2025-27717.md): Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of priv (CVSS 5.4, Intel(R) Graphics Driver software)
- [CVE-2025-27707](https://cve.now/CVE-2025-27707.md): Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) (CVSS 2.1, Edge Orchestrator software)
- [CVE-2025-27576](https://cve.now/CVE-2025-27576.md): Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow (CVSS 2.9, Edge Orchestrator software)
- [CVE-2025-27559](https://cve.now/CVE-2025-27559.md): Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially ena (CVSS 5.4, AI Playground software)
- [CVE-2025-27537](https://cve.now/CVE-2025-27537.md): Improper input validation for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authe (CVSS 5.1, Edge Orchestrator software)
- [CVE-2025-27250](https://cve.now/CVE-2025-27250.md): Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow (CVSS 5.1, Edge Orchestrator software)
- [CVE-2025-26863](https://cve.now/CVE-2025-26863.md): Uncontrolled resource consumption in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an a (CVSS 4.8, Intel(R) 700 Series Ethernet)
- [CVE-2025-26697](https://cve.now/CVE-2025-26697.md): Uncontrolled resource consumption in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an a (CVSS 4.8, Intel(R) 700 Series Ethernet)
- [CVE-2025-26472](https://cve.now/CVE-2025-26472.md): Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow (CVSS 5.9, Edge Orchestrator software)
- [CVE-2025-26470](https://cve.now/CVE-2025-26470.md): Incorrect default permissions for some Intel(R) Distribution for Python software installers before version 2025.1.0 may allow an authenticat (CVSS 5.4, Intel(R) Distribution for Python software installers)
- [CVE-2025-26404](https://cve.now/CVE-2025-26404.md): Uncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an authenticated user to potentially enable escal (CVSS 5.4, Intel(R) DSA software)
- [CVE-2025-26403](https://cve.now/CVE-2025-26403.md): Out-of-bounds write in the memory subsystem for some Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX may allow a privi (CVSS 4.5, Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or In…)
- [CVE-2025-25273](https://cve.now/CVE-2025-25273.md): Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow a (CVSS 8.8, Intel(R) 700 Series Ethernet)
- [CVE-2025-24923](https://cve.now/CVE-2025-24923.md): Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to poten (CVSS 5.4, Intel(R) AI for Enterprise Retrieval-augmented Generation s…)
- [CVE-2025-24921](https://cve.now/CVE-2025-24921.md): Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthe (CVSS 6.9, Edge Orchestrator software)
- [CVE-2025-24840](https://cve.now/CVE-2025-24840.md): Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthe (CVSS 2.3, Edge Orchestrator software)
- [CVE-2025-24835](https://cve.now/CVE-2025-24835.md): Protection mechanism failure in the Intel(R) Graphics Driver for the Intel(R) Arc(TM) B-Series graphics before version 32.0.101.6737 may all (CVSS 4.1, Intel(R) Arc(TM) B-Series graphics)
- [CVE-2025-24523](https://cve.now/CVE-2025-24523.md): Protection mechanism failure for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an au (CVSS 5.1, Edge Orchestrator software)
- [CVE-2025-24520](https://cve.now/CVE-2025-24520.md): Insertion of sensitive information into log file for some Intel(R) Local Manageability Service software before version 2514.7.16.0 may allow (CVSS 4.8, Intel(R) Local Manageability Service software)
- [CVE-2025-24515](https://cve.now/CVE-2025-24515.md): NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via loca (CVSS 6.8, Intel(R) Graphics Drivers)
- [CVE-2025-24511](https://cve.now/CVE-2025-24511.md): Improper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series Ethernet before version 5.19.2 may allow an authentica (CVSS 2.0, Intel(R) I350 Series Ethernet)
- [CVE-2025-24486](https://cve.now/CVE-2025-24486.md): Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authentic (CVSS 8.8, Intel(R) 700 Series Ethernet)
- [CVE-2025-24484](https://cve.now/CVE-2025-24484.md): Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authentic (CVSS 8.8, Intel(R) 800 Series Ethernet)
- [CVE-2025-24325](https://cve.now/CVE-2025-24325.md): Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authentic (CVSS 9.3, Intel(R) 800 Series Ethernet)
- [CVE-2025-24324](https://cve.now/CVE-2025-24324.md): Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an auth (CVSS 2.0, Intel(R) 800 Series Ethernet)
- [CVE-2025-24323](https://cve.now/CVE-2025-24323.md): Improper access control in some firmware package and LED mode toggle tool for some Intel(R) PCIe Switch software before version MR4\_1.0b1 ma (CVSS 7.0, firmware package and LED mode toggle tool for some Intel(R)…)
- [CVE-2025-24313](https://cve.now/CVE-2025-24313.md): Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged use (CVSS 6.7, Device Plugins for Kubernetes software maintained by Intel)
- [CVE-2025-24305](https://cve.now/CVE-2025-24305.md): Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a p (CVSS 7.0, Intel(R) Xeon(R) processors)
- [CVE-2025-24303](https://cve.now/CVE-2025-24303.md): Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1. (CVSS 8.8, Intel(R) 800 Series Ethernet)
- [CVE-2025-24302](https://cve.now/CVE-2025-24302.md): Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentiall (CVSS 5.4, TinyCBOR libraries maintained by Intel)
- [CVE-2025-24296](https://cve.now/CVE-2025-24296.md): Improper input validation in some firmware for the Intel(R) E810 Ethernet before version 4.6 may allow a privileged user to enable denial of (CVSS 5.1, firmware for the Intel(R) E810 Ethernet)
- [CVE-2025-23241](https://cve.now/CVE-2025-23241.md): Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an auth (CVSS 8.4, Intel(R) 800 Series Ethernet)
- [CVE-2025-22893](https://cve.now/CVE-2025-22893.md): Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow a (CVSS 8.8, Intel(R) 800 Series Ethernet)
- [CVE-2025-22889](https://cve.now/CVE-2025-22889.md): Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged (CVSS 7.0, Intel(R) Xeon(R) 6 processor with Intel(R) TDX)
- [CVE-2025-22853](https://cve.now/CVE-2025-22853.md): Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via (CVSS 1.8, Intel(R) TDX)
- [CVE-2025-22840](https://cve.now/CVE-2025-22840.md): Sequence of processor instructions leads to unexpected behavior for some Intel(R) Xeon(R) 6 Scalable processors may allow an authenticated u (CVSS 5.3, Intel(R) Xeon(R) 6 Scalable processors)
- [CVE-2025-22839](https://cve.now/CVE-2025-22839.md): Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to pot (CVSS 7.3, Intel(R) Xeon(R) 6 Scalable processors)
- [CVE-2025-22838](https://cve.now/CVE-2025-22838.md): Uncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user (CVSS 5.4, Intel(R) RealSense(TM) Dynamic Calibrator software)
- [CVE-2025-22836](https://cve.now/CVE-2025-22836.md): Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an auth (CVSS 8.8, Intel(R) 800 Series Ethernet)
- [CVE-2025-22392](https://cve.now/CVE-2025-22392.md): Out-of-bounds read in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable i (CVSS 5.9, Intel(R) AMT and Intel(R) Standard Manageability)
- [CVE-2025-21096](https://cve.now/CVE-2025-21096.md): Improper buffer restrictions in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege (CVSS 2.0, Intel(R) TDX)
- [CVE-2025-21093](https://cve.now/CVE-2025-21093.md): Uncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authen (CVSS 5.4, Intel(R) Driver & Support Assistant Tool software)
- [CVE-2025-21090](https://cve.now/CVE-2025-21090.md): Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable de (CVSS 4.1, Intel(R) Xeon(R) processors)
- [CVE-2025-21086](https://cve.now/CVE-2025-21086.md): Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authentic (CVSS 6.9, Intel(R) 700 Series Ethernet)
- [CVE-2025-20627](https://cve.now/CVE-2025-20627.md): Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to pot (CVSS 5.4, Intel(R) oneAPI DPC++/C++ Compiler software)
- [CVE-2025-20625](https://cve.now/CVE-2025-20625.md): Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.110.0.5 may allow an unauthenticated (CVSS 7.1, Intel(R) PROSet/Wireless WiFi Software for Windows)
- [CVE-2025-20613](https://cve.now/CVE-2025-20613.md): Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an authenticated user to potential (CVSS 2.0, Intel(R) TDX)
- [CVE-2025-20109](https://cve.now/CVE-2025-20109.md): Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to pot (CVSS 7.3, Intel(R) Processors)
- [CVE-2025-20099](https://cve.now/CVE-2025-20099.md): Improper access control for some Intel(R) Rapid Storage Technology installation software may allow an authenticated user to potentially enab (CVSS 5.4, Intel(R) Rapid Storage Technology installation software)
- [CVE-2025-20093](https://cve.now/CVE-2025-20093.md): Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1. (CVSS 8.6, Intel(R) 800 Series Ethernet)
- [CVE-2025-20092](https://cve.now/CVE-2025-20092.md): Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable esca (CVSS 5.4, Clock Jitter Tool software)
- [CVE-2025-20090](https://cve.now/CVE-2025-20090.md): Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to pote (CVSS 6.8, Intel(R) QuickAssist Technology software)
- [CVE-2025-20087](https://cve.now/CVE-2025-20087.md): Incorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially (CVSS 5.4, Intel(R) oneAPI DPC++/C++ Compiler software installers)
- [CVE-2025-20077](https://cve.now/CVE-2025-20077.md): Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some Intel(R) reference server platforms m (CVSS 5.6, Intel(R) reference server platforms)
- [CVE-2025-20074](https://cve.now/CVE-2025-20074.md): Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before version 40.24.11210 may (CVSS 7.3, Intel(R) Connectivity Performance Suite software installers)
- [CVE-2025-20067](https://cve.now/CVE-2025-20067.md): Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may allow a privileged user to potentially enable informat (CVSS 6.8, Intel(R) CSME and Intel(R) SPS)
- [CVE-2025-20053](https://cve.now/CVE-2025-20053.md): Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable (CVSS 7.0, Intel(R) Xeon(R) Processor firmware with SGX enabled)
- [CVE-2025-20048](https://cve.now/CVE-2025-20048.md): Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially e (CVSS 5.4, Intel(R) Trace Analyzer and Collector software)
- [CVE-2025-20037](https://cve.now/CVE-2025-20037.md): Time-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user (CVSS 6.8, Intel(R) Converged Security and Management Engine)
- [CVE-2025-20025](https://cve.now/CVE-2025-20025.md): Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentiall (CVSS 4.1, TinyCBOR libraries maintained by Intel)
- [CVE-2025-20023](https://cve.now/CVE-2025-20023.md): Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable es (CVSS 5.4, Intel(R) Graphics Driver software installers)
- [CVE-2025-20017](https://cve.now/CVE-2025-20017.md): Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially e (CVSS 5.4, Intel(R) oneAPI Toolkit and component software installers)
- [CVE-2025-55167](https://cve.now/CVE-2025-55167.md): WeGIA SQL Injection via id\_fichamedica at endpoint \`GET/html/funcionario/dependente\_remover.php\` (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-55166](https://cve.now/CVE-2025-55166.md): svg-sanitizer By-Passing Attribute Sanitization (CVSS 5.1, darylldoyle svg-sanitizer · enshrined/svg-sanitize)
- [CVE-2025-3089](https://cve.now/CVE-2025-3089.md): Broken Access Control in ServiceNow AI Platform (CVSS 5.3, ServiceNow AI Platform)
- [CVE-2025-55164](https://cve.now/CVE-2025-55164.md): content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE (CVSS 8.8, helmetjs content-security-policy-parser · content-security-…)
- [CVE-2025-38500](https://cve.now/CVE-2025-38500.md): xfrm: interface: fix use-after-free after changing collect\_md xfrm interface (CVSS 7.8, Linux)
- [CVE-2025-55010](https://cve.now/CVE-2025-55010.md): Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events (CVSS 9.1, kanboard)
- [CVE-2025-55011](https://cve.now/CVE-2025-55011.md): Kanboard Path Traversal in File Write via Task File Upload Api (CVSS 6.4, kanboard)
- [CVE-2025-54864](https://cve.now/CVE-2025-54864.md): Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins (CVSS 6.9, NixOS hydra)
- [CVE-2025-54800](https://cve.now/CVE-2025-54800.md): Hydra persistent XSS in build metrics (CVSS 7.1, NixOS hydra)
- [CVE-2025-8452](https://cve.now/CVE-2025-8452.md): Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc. (CVSS 4.3, Brother Industries DCP-L8410CDW · Brother Industries M… +396)
- [CVE-2025-5468](https://cve.now/CVE-2025-5468.md): Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti (CVSS 5.5, Ivanti Connect Secure · Ivanti Policy Secure +2)
- [CVE-2025-5466](https://cve.now/CVE-2025-5466.md): XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Iva (CVSS 4.9, Ivanti Connect Secure · Ivanti Policy Secure +2)
- [CVE-2025-5462](https://cve.now/CVE-2025-5462.md): A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway be (CVSS 7.5, Ivanti Connect Secure · Ivanti Policy Secure +2)
- [CVE-2025-5456](https://cve.now/CVE-2025-5456.md): A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gatewa (CVSS 7.5, Ivanti Connect Secure · Ivanti Policy Secure +2)
- [CVE-2025-3831](https://cve.now/CVE-2025-3831.md): Exposed SFTP server (CVSS 8.1, checkpoint Check Point Harmony SASE)
- [CVE-2025-8310](https://cve.now/CVE-2025-8310.md): Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticat (CVSS 6.5, Ivanti Virtual Application Delivery ControllerCWE-862)
- [CVE-2025-8297](https://cve.now/CVE-2025-8297.md): Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin priv (CVSS 7.2, Ivanti Avalanche)
- [CVE-2025-8296](https://cve.now/CVE-2025-8296.md): SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrar (CVSS 7.2, Ivanti Avalanche)
- [CVE-2024-38805](https://cve.now/CVE-2024-38805.md): iSCSI Remote Memory Corruption and Denial of Service (CVSS 6.3, TianoCore EDK2)
- [CVE-2025-22830](https://cve.now/CVE-2025-22830.md): SmiFlash Race Condition Vulnerability (CVSS 7.3, AMI AptioV)
- [CVE-2025-22834](https://cve.now/CVE-2025-22834.md): ThirdPartyVideo SetVariable Vulnerability (CVSS 4.2, AMI AptioV)
- [CVE-2025-43735](https://cve.now/CVE-2025-43735.md): A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q (CVSS 6.9, Liferay Portal · Liferay DXP +3)
- [CVE-2025-40770](https://cve.now/CVE-2025-40770.md): A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). (CVSS 7.4, Siemens SINEC Traffic Analyzer)
- [CVE-2025-40769](https://cve.now/CVE-2025-40769.md): A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions \< V3.0). (CVSS 7.4, Siemens SINEC Traffic Analyzer)
- [CVE-2025-40768](https://cve.now/CVE-2025-40768.md): A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions \< V3.0). (CVSS 7.3, Siemens SINEC Traffic Analyzer)
- [CVE-2025-40767](https://cve.now/CVE-2025-40767.md): A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions \< V3.0). (CVSS 7.8, Siemens SINEC Traffic Analyzer)
- [CVE-2025-40766](https://cve.now/CVE-2025-40766.md): A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions \< V3.0). (CVSS 5.5, Siemens SINEC Traffic Analyzer)
- [CVE-2025-40764](https://cve.now/CVE-2025-40764.md): A vulnerability has been identified in Simcenter Femap V2406 (All versions \< V2406.0003), Simcenter Femap V2412 (All versions \< V2412.0002). (CVSS 7.8, Siemens Simcenter Femap)
- [CVE-2025-40762](https://cve.now/CVE-2025-40762.md): A vulnerability has been identified in Simcenter Femap V2406 (All versions \< V2406.0003), Simcenter Femap V2412 (All versions \< V2412.0002). (CVSS 7.8, Siemens Simcenter Femap)
- [CVE-2025-40761](https://cve.now/CVE-2025-40761.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All (CVSS 7.6, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40759](https://cve.now/CVE-2025-40759.md): A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions \< V17 Update 9), SIMATIC STEP (CVSS 7.8, Siemens SIMATIC S7-PLCSIM · Siemens SIMATIC STEP 7 +7)
- [CVE-2025-40753](https://cve.now/CVE-2025-40753.md): A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions \>= V2.60 \< V2.62), POWER METER SICAM Q100 ( (CVSS 6.2, Siemens POWER METER SICAM Q100 · Siemens POWER METER SICAM…)
- [CVE-2025-40752](https://cve.now/CVE-2025-40752.md): A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions \>= V2.60 \< V2.62), POWER METER SICAM Q100 ( (CVSS 6.2, Siemens POWER METER SICAM Q100 · Siemens POWER METER SICAM…)
- [CVE-2025-40751](https://cve.now/CVE-2025-40751.md): A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions \< V3.3). (CVSS 6.3, Siemens SIMATIC RTLS Locating Manager)
- [CVE-2025-40746](https://cve.now/CVE-2025-40746.md): A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions \< V3.2). (CVSS 9.1, Siemens SIMATIC RTLS Locating Manager)
- [CVE-2025-40743](https://cve.now/CVE-2025-40743.md): A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions \< V4.95 SP5), SINUMERIK 828D PPU.5 (All versions \< V5.25 SP1), SIN (CVSS 8.3, Siemens SINUMERIK 828D PPU.4 · Siemens SINUMERIK 828D PP… +3)
- [CVE-2025-40584](https://cve.now/CVE-2025-40584.md): A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5 (CVSS 5.5, Siemens SIMOTION SCOUT TIA · Siemens SIMOTION SCOUT +1)
- [CVE-2025-40570](https://cve.now/CVE-2025-40570.md): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \< V10.0), SIPROTEC 5 6MD85 (CP300) (All versions \>= V7.80 \< V1 (CVSS 2.4, Siemens SIPROTEC 5 6MD84 · Siemens SIPROTEC 5 6MD85 +34)
- [CVE-2025-33023](https://cve.now/CVE-2025-33023.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All (CVSS 4.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-30034](https://cve.now/CVE-2025-30034.md): A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions \< V3.3). (CVSS 6.2, Siemens SIMATIC RTLS Locating Manager)
- [CVE-2025-30033](https://cve.now/CVE-2025-30033.md): The affected setup component is vulnerable to DLL hijacking. (CVSS 7.8, Siemens Automation License Manager · Siemens CEMAT +85)
- [CVE-2024-54678](https://cve.now/CVE-2024-54678.md): A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All v (CVSS 8.2, Siemens SIMATIC PCS neo · Siemens SIMATIC S7-PLCSIM +9)
- [CVE-2024-52504](https://cve.now/CVE-2024-52504.md): A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SI (CVSS 7.5, Siemens SIPROTEC 4 6MD61 · Siemens SIPROTEC 4 6MD63 +27)
- [CVE-2024-41986](https://cve.now/CVE-2024-41986.md): A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions \>= V13.2 \< V2506), SOA Audit (All versions \>= (CVSS 6.4, Siemens SmartClient modules Opcenter QL Home · Siemens S… +1)
- [CVE-2024-41985](https://cve.now/CVE-2024-41985.md): A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions \>= V13.2 \< V2506), SOA Audit (All versions \>= (CVSS 2.6, Siemens SmartClient modules Opcenter QL Home · Siemens S… +1)
- [CVE-2024-41984](https://cve.now/CVE-2024-41984.md): A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions \>= V13.2 \< V2506), SOA Audit (All versions \>= (CVSS 2.6, Siemens SmartClient modules Opcenter QL Home · Siemens S… +1)
- [CVE-2024-41983](https://cve.now/CVE-2024-41983.md): A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions \>= V13.2 \< V2506), SOA Audit (All versions \>= (CVSS 3.5, Siemens SmartClient modules Opcenter QL Home · Siemens S… +1)
- [CVE-2024-41982](https://cve.now/CVE-2024-41982.md): A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions \>= V13.2 \< V2506), SOA Audit (All versions \>= (CVSS 4.8, Siemens SmartClient modules Opcenter QL Home · Siemens S… +1)
- [CVE-2024-41980](https://cve.now/CVE-2024-41980.md): A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions \>= V13.2 \< V2506), SOA Audit (All versions \>= (CVSS 3.1, Siemens SmartClient modules Opcenter QL Home · Siemens S… +1)
- [CVE-2024-41979](https://cve.now/CVE-2024-41979.md): A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions \>= V13.2 \< V2506), SOA Audit (All versions \>= (CVSS 7.1, Siemens SmartClient modules Opcenter QL Home · Siemens S… +1)
- [CVE-2025-43736](https://cve.now/CVE-2025-43736.md): A Denial Of Service via File Upload (DOS) vulnerability in the Liferay Portal 7.4.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2 (CVSS 6.9, Liferay Portal · Liferay DXP +6)
- [CVE-2025-8885](https://cve.now/CVE-2025-8885.md): Possible DOS in processing specially formed ASN.1 Object Identifiers (CVSS 6.3, Legion of the Bouncy Castle BC Java · Legion of the Boun… +7)
- [CVE-2025-26398](https://cve.now/CVE-2025-26398.md): SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability (CVSS 5.6, SolarWinds Database Performance Analyzer)
- [CVE-2025-41686](https://cve.now/CVE-2025-41686.md): Improper File Permissions Allow Local Privilege Escalation (CVSS 7.8, Phoenix Contact DaUM)
- [CVE-2025-8418](https://cve.now/CVE-2025-8418.md): B Slider- Gutenberg Slider Block for WP \<= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation (CVSS 8.8, bplugins bSlider – Create Responsive Image, Post, Product,…)
- [CVE-2025-8482](https://cve.now/CVE-2025-8482.md): Simple Local Avatars \<= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration (CVSS 4.3, 10up Simple Local Avatars)
- [CVE-2025-8874](https://cve.now/CVE-2025-8874.md): Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations \<= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox (CVSS 6.4, litonice13 Master Addons For Elementor – Widgets, Extension…)
- [CVE-2025-8767](https://cve.now/CVE-2025-8767.md): AnWP Football Leagues \<= 0.16.17 - Authenticated (Administrator+) CSV Injection (CVSS 4.8, anwppro AnWP Football Leagues)
- [CVE-2025-47444](https://cve.now/CVE-2025-47444.md): WordPress FiboSearch plugin \<= 1.32.1 - Broken Access Control vulnerability (CVSS 5.3, Damian Góra FiboSearch)
- [CVE-2025-6253](https://cve.now/CVE-2025-6253.md): UiCore Elements \<= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read (CVSS 7.5, UiCore Elements – Free widgets and templates for Elementor)
- [CVE-2025-8081](https://cve.now/CVE-2025-8081.md): Elementor \<= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import (CVSS 4.9, elemntor Elementor Website Builder – more than just a page…)
- [CVE-2025-30027](https://cve.now/CVE-2025-30027.md): An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2025-3892](https://cve.now/CVE-2025-3892.md): ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2025-7622](https://cve.now/CVE-2025-7622.md): During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access (CVSS 5.1, Axis Communications AB AXIS Camera Station Pro · Axis Commu…)
- [CVE-2025-8314](https://cve.now/CVE-2025-8314.md): Software Issue Manager \<= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess\_msg Parameter (CVSS 6.4, emarket-design Project Management, Bug and Issue Tracking P…)
- [CVE-2025-8059](https://cve.now/CVE-2025-8059.md): B Blocks \<= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr\_registration Function (CVSS 9.8, bplugins bBlocks – Essential Gutenberg Blocks & Patterns Co…)
- [CVE-2025-8568](https://cve.now/CVE-2025-8568.md): GMap - Venturit \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter (CVSS 6.4, prabode GMap Generator)
- [CVE-2025-8688](https://cve.now/CVE-2025-8688.md): Inline Stock Quotes \<= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock Shortcode (CVSS 6.4, ebernstein Inline Stock Quotes)
- [CVE-2025-8621](https://cve.now/CVE-2025-8621.md): Mosaic Generator \<= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' Parameter (CVSS 6.4, odn Mosaic Generator)
- [CVE-2025-8690](https://cve.now/CVE-2025-8690.md): Simple Responsive Slider \<= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, addix Simple Responsive Slider)
- [CVE-2025-4390](https://cve.now/CVE-2025-4390.md): WP Private Content Plus \<= 3.6.2 - Unauthenticated Sensitive Information Exposure (CVSS 5.3, nimeshrmr WP Private Content Plus)
- [CVE-2025-8685](https://cve.now/CVE-2025-8685.md): Wp chart generator \<= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpchart Shortcode (CVSS 6.4, emilien Wp chart generator)
- [CVE-2025-8462](https://cve.now/CVE-2025-8462.md): RT Easy Builder \<= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, risetheme RT Easy Builder – Advanced addons for Elementor)
- [CVE-2025-5391](https://cve.now/CVE-2025-5391.md): WooCommerce Purchase Orders \<= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.1, bbioon Purchase Orders for WooCommerce)
- [CVE-2025-42976](https://cve.now/CVE-2025-42976.md): Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) (CVSS 8.1, SAP\_SE SAP NetWeaver Application Server ABAP)
- [CVE-2025-42975](https://cve.now/CVE-2025-42975.md): Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) (CVSS 6.1, SAP\_SE SAP NetWeaver Application Server ABAP)
- [CVE-2025-42957](https://cve.now/CVE-2025-42957.md): Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (CVSS 9.9, SAP\_SE SAP S/4HANA)
- [CVE-2025-42955](https://cve.now/CVE-2025-42955.md): Missing authorization check in SAP Cloud Connector (CVSS 3.5, SAP\_SE SAP Cloud Connector)
- [CVE-2025-42951](https://cve.now/CVE-2025-42951.md): Broken Authorization in SAP Business One (SLD) (CVSS 8.8, SAP\_SE SAP Business One)
- [CVE-2025-42950](https://cve.now/CVE-2025-42950.md): Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) (CVSS 9.9, SAP\_SE SAP Landscape Transformation)
- [CVE-2025-42949](https://cve.now/CVE-2025-42949.md): Missing Authorization check in ABAP Platform (CVSS 4.9, SAP\_SE ABAP Platform)
- [CVE-2025-42948](https://cve.now/CVE-2025-42948.md): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform (CVSS 6.1, SAP\_SE SAP NetWeaver ABAP Platform)
- [CVE-2025-42946](https://cve.now/CVE-2025-42946.md): Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management) (CVSS 6.9, SAP\_SE SAP S/4HANA)
- [CVE-2025-42945](https://cve.now/CVE-2025-42945.md): HTML Injection vulnerability in SAP NetWeaver Application Server ABAP (CVSS 6.1, SAP\_SE SAP NetWeaver Application Server ABAP)
- [CVE-2025-42943](https://cve.now/CVE-2025-42943.md): Information Disclosure in SAP GUI for Windows (CVSS 4.5, SAP\_SE SAP GUI for Windows)
- [CVE-2025-42942](https://cve.now/CVE-2025-42942.md): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (CVSS 6.1, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2025-42941](https://cve.now/CVE-2025-42941.md): Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad) (CVSS 3.5, SAP\_SE SAP Fiori)
- [CVE-2025-42936](https://cve.now/CVE-2025-42936.md): Missing Authorization check in SAP NetWeaver Application Server for ABAP (CVSS 5.4, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2025-42935](https://cve.now/CVE-2025-42935.md): Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) (CVSS 4.1, SAP\_SE SAP NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2025-42934](https://cve.now/CVE-2025-42934.md): CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice) (CVSS 4.3, SAP\_SE SAP S/4HANA)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.