# CVEs published 2025-11-11

323 CVEs were published on November 11, 2025: 15 critical, 128 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-61835](https://cve.now/CVE-2025-61835.md): Substance3D - Stager | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2025-61833](https://cve.now/CVE-2025-61833.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2025-64531](https://cve.now/CVE-2025-64531.md): Substance3D - Stager | Use After Free (CWE-416) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2025-61834](https://cve.now/CVE-2025-61834.md): Substance3D - Stager | Use After Free (CWE-416) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2025-40827](https://cve.now/CVE-2025-40827.md): A vulnerability has been identified in Siemens Software Center (All versions \< V3.5), Solid Edge SE2025 (All versions \< V225.0 Update 10). (CVSS 7.8, Siemens Software Center · Siemens Solid Edge SE2025)
- [CVE-2025-40817](https://cve.now/CVE-2025-40817.md): A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions \< V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) ( (CVSS 6.5, Siemens LOGO! 12/24RCE · Siemens LOGO! 12/24RCEo +14)
- [CVE-2025-40816](https://cve.now/CVE-2025-40816.md): A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions \< V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) ( (CVSS 7.6, Siemens LOGO! 12/24RCE · Siemens LOGO! 12/24RCEo +14)
- [CVE-2025-40815](https://cve.now/CVE-2025-40815.md): A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions \< V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) ( (CVSS 7.2, Siemens LOGO! 12/24RCE · Siemens LOGO! 12/24RCEo +14)
- [CVE-2025-40763](https://cve.now/CVE-2025-40763.md): A vulnerability has been identified in Altair Grid Engine (All versions \< V2026.0.0). (CVSS 7.8, Siemens Altair Grid Engine)
- [CVE-2025-40760](https://cve.now/CVE-2025-40760.md): A vulnerability has been identified in Altair Grid Engine (All versions \< V2026.0.0). (CVSS 5.5, Siemens Altair Grid Engine)
- [CVE-2025-40744](https://cve.now/CVE-2025-40744.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 11). (CVSS 7.5, Siemens Solid Edge SE2025)
- [CVE-2024-32014](https://cve.now/CVE-2024-32014.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 4.7, Siemens Spectrum Power)
- [CVE-2024-32011](https://cve.now/CVE-2024-32011.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 8.8, Siemens Spectrum Power)
- [CVE-2024-32010](https://cve.now/CVE-2024-32010.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 7.8, Siemens Spectrum Power)
- [CVE-2024-32009](https://cve.now/CVE-2024-32009.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 7.8, Siemens Spectrum Power)
- [CVE-2024-32008](https://cve.now/CVE-2024-32008.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 7.8, Siemens Spectrum Power)
- [CVE-2025-41116](https://cve.now/CVE-2025-41116.md): Incorrect oauth passthrough in Grafana Databricks Datasource (CVSS 2.1, Grafana Labs Grafana Databricks Datasource Plugin)
- [CVE-2025-3717](https://cve.now/CVE-2025-3717.md): Incorrect oauth passthrough in Grafana Snowflake Datasource (CVSS 2.1, Grafana Labs Grafana Snowflake Datasource Plugin)
- [CVE-2025-12748](https://cve.now/CVE-2025-12748.md): Libvirt: denial of service in xml parsing (CVSS 5.5, libvirt · Red Hat Enterprise Linux)
- [CVE-2025-61843](https://cve.now/CVE-2025-61843.md): Format Plugins | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Format Plugins)
- [CVE-2025-61839](https://cve.now/CVE-2025-61839.md): Format Plugins | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Format Plugins)
- [CVE-2025-61845](https://cve.now/CVE-2025-61845.md): Format Plugins | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Format Plugins)
- [CVE-2025-61840](https://cve.now/CVE-2025-61840.md): Format Plugins | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Format Plugins)
- [CVE-2025-61837](https://cve.now/CVE-2025-61837.md): Format Plugins | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Format Plugins)
- [CVE-2025-61838](https://cve.now/CVE-2025-61838.md): Format Plugins | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Format Plugins)
- [CVE-2025-61841](https://cve.now/CVE-2025-61841.md): Format Plugins | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Format Plugins)
- [CVE-2025-61842](https://cve.now/CVE-2025-61842.md): Format Plugins | Use After Free (CWE-416) (CVSS 5.5, Adobe Format Plugins)
- [CVE-2025-61844](https://cve.now/CVE-2025-61844.md): Format Plugins | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Format Plugins)
- [CVE-2025-61830](https://cve.now/CVE-2025-61830.md): Adobe Pass | Incorrect Authorization (CWE-863) (CVSS 7.1, Adobe Pass)
- [CVE-2025-30398](https://cve.now/CVE-2025-30398.md): Nuance PowerScribe 360 Information Disclosure Vulnerability (CVSS 8.1, Microsoft Nuance PowerScribe · Microsoft PowerScribe One)
- [CVE-2025-62453](https://cve.now/CVE-2025-62453.md): GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability (CVSS 5.0, Microsoft Visual Studio Code)
- [CVE-2025-60721](https://cve.now/CVE-2025-60721.md): Windows Administrator Protection Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-62449](https://cve.now/CVE-2025-62449.md): Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability (CVSS 6.8, Microsoft Visual Studio Code CoPilot Chat Extension)
- [CVE-2025-62222](https://cve.now/CVE-2025-62222.md): Agentic AI and Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code CoPilot Chat Extension)
- [CVE-2025-62213](https://cve.now/CVE-2025-62213.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-62215](https://cve.now/CVE-2025-62215.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, KEV, Microsoft Windows)
- [CVE-2025-62214](https://cve.now/CVE-2025-62214.md): Visual Studio Remote Code Execution Vulnerability (CVSS 6.7, Microsoft Visual Studio)
- [CVE-2025-62211](https://cve.now/CVE-2025-62211.md): Dynamics 365 Field Service (online) Spoofing Vulnerability (CVSS 8.7, Microsoft Dynamics 365 Field Service)
- [CVE-2025-59499](https://cve.now/CVE-2025-59499.md): Microsoft SQL Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SQL Server 2016 Service Pack · Microsoft SQL Serv…)
- [CVE-2025-62209](https://cve.now/CVE-2025-62209.md): Windows License Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-62208](https://cve.now/CVE-2025-62208.md): Windows License Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-62205](https://cve.now/CVE-2025-62205.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-62204](https://cve.now/CVE-2025-62204.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 8.0, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2025-62203](https://cve.now/CVE-2025-62203.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-62202](https://cve.now/CVE-2025-62202.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 7.1, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-62201](https://cve.now/CVE-2025-62201.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-62200](https://cve.now/CVE-2025-62200.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-60724](https://cve.now/CVE-2025-60724.md): GDI+ Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Office for Android · Microsoft Office LTSC for… +1)
- [CVE-2025-60723](https://cve.now/CVE-2025-60723.md): DirectX Graphics Kernel Denial of Service Vulnerability (CVSS 6.3, Microsoft Windows)
- [CVE-2025-60720](https://cve.now/CVE-2025-60720.md): Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-60718](https://cve.now/CVE-2025-60718.md): Windows Administrator Protection Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-60717](https://cve.now/CVE-2025-60717.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-60716](https://cve.now/CVE-2025-60716.md): DirectX Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-60715](https://cve.now/CVE-2025-60715.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2025-60714](https://cve.now/CVE-2025-60714.md): Windows OLE Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-60713](https://cve.now/CVE-2025-60713.md): Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2025-59515](https://cve.now/CVE-2025-59515.md): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-59514](https://cve.now/CVE-2025-59514.md): Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-47179](https://cve.now/CVE-2025-47179.md): Configuration Manager Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Configuration Manager)
- [CVE-2025-59240](https://cve.now/CVE-2025-59240.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-62452](https://cve.now/CVE-2025-62452.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2025-62220](https://cve.now/CVE-2025-62220.md): Windows Subsystem for Linux GUI Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Subsystem for Linux GUI)
- [CVE-2025-62219](https://cve.now/CVE-2025-62219.md): Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-62218](https://cve.now/CVE-2025-62218.md): Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-62217](https://cve.now/CVE-2025-62217.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-60722](https://cve.now/CVE-2025-60722.md): Microsoft OneDrive for Android Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft OneDrive for Android)
- [CVE-2025-60719](https://cve.now/CVE-2025-60719.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-62216](https://cve.now/CVE-2025-62216.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-62210](https://cve.now/CVE-2025-62210.md): Dynamics 365 Field Service (online) Spoofing Vulnerability (CVSS 8.7, Microsoft Dynamics 365 Field Service)
- [CVE-2025-62206](https://cve.now/CVE-2025-62206.md): Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Dynamics 365 (on-premises))
- [CVE-2025-62199](https://cve.now/CVE-2025-62199.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-60728](https://cve.now/CVE-2025-60728.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 4.3, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-60727](https://cve.now/CVE-2025-60727.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-60726](https://cve.now/CVE-2025-60726.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 7.1, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-60710](https://cve.now/CVE-2025-60710.md): Host Process for Windows Tasks Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2025-60709](https://cve.now/CVE-2025-60709.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-60708](https://cve.now/CVE-2025-60708.md): Storvsp.sys Driver Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2025-60707](https://cve.now/CVE-2025-60707.md): Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-60706](https://cve.now/CVE-2025-60706.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-60705](https://cve.now/CVE-2025-60705.md): Windows Client-Side Caching Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-60704](https://cve.now/CVE-2025-60704.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2025-60703](https://cve.now/CVE-2025-60703.md): Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-59513](https://cve.now/CVE-2025-59513.md): Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-59512](https://cve.now/CVE-2025-59512.md): Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-59511](https://cve.now/CVE-2025-59511.md): Windows WLAN Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-59510](https://cve.now/CVE-2025-59510.md): Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-59509](https://cve.now/CVE-2025-59509.md): Windows Speech Recognition Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-59508](https://cve.now/CVE-2025-59508.md): Windows Speech Recognition Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-59507](https://cve.now/CVE-2025-59507.md): Windows Speech Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-59506](https://cve.now/CVE-2025-59506.md): DirectX Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-59505](https://cve.now/CVE-2025-59505.md): Windows Smart Card Reader Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-59504](https://cve.now/CVE-2025-59504.md): Azure Monitor Agent Remote Code Execution Vulnerability (CVSS 7.3, Microsoft Azure Monitor)
- [CVE-2025-61828](https://cve.now/CVE-2025-61828.md): Illustrator on iPad | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator on iPad)
- [CVE-2025-61827](https://cve.now/CVE-2025-61827.md): Illustrator on iPad | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Illustrator on iPad)
- [CVE-2025-61826](https://cve.now/CVE-2025-61826.md): Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 7.8, Adobe Illustrator on iPad)
- [CVE-2025-61829](https://cve.now/CVE-2025-61829.md): Illustrator on iPad | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Illustrator on iPad)
- [CVE-2025-61836](https://cve.now/CVE-2025-61836.md): Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 7.8, Adobe Illustrator on iPad)
- [CVE-2025-61831](https://cve.now/CVE-2025-61831.md): Illustrator | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Illustrator)
- [CVE-2025-61820](https://cve.now/CVE-2025-61820.md): Illustrator | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Illustrator)
- [CVE-2025-61819](https://cve.now/CVE-2025-61819.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Photoshop Desktop)
- [CVE-2025-61818](https://cve.now/CVE-2025-61818.md): InCopy | Use After Free (CWE-416) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-61816](https://cve.now/CVE-2025-61816.md): InCopy | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-61817](https://cve.now/CVE-2025-61817.md): InCopy | Use After Free (CWE-416) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-61815](https://cve.now/CVE-2025-61815.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-61814](https://cve.now/CVE-2025-61814.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-61824](https://cve.now/CVE-2025-61824.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-61832](https://cve.now/CVE-2025-61832.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-35972](https://cve.now/CVE-2025-35972.md): Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privil (CVSS 5.4, Intel MPI Library)
- [CVE-2025-35971](https://cve.now/CVE-2025-35971.md): Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allo (CVSS 8.3, Intel(R) PROSet/Wireless WiFi Software for Windows)
- [CVE-2025-35968](https://cve.now/CVE-2025-35968.md): Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. (CVSS 7.1, Slim Bootloader)
- [CVE-2025-35967](https://cve.now/CVE-2025-35967.md): Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow (CVSS 7.0, Intel(R) PROSet/Wireless WiFi Software for Windows)
- [CVE-2025-35963](https://cve.now/CVE-2025-35963.md): Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device (CVSS 8.3, Intel(R) PROSet/Wireless WiFi Software for Windows)
- [CVE-2025-33029](https://cve.now/CVE-2025-33029.md): Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allo (CVSS 8.3, Intel(R) PROSet/Wireless WiFi Software for Windows)
- [CVE-2025-33000](https://cve.now/CVE-2025-33000.md): Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalatio (CVSS 7.3, Intel QuickAssist Technology)
- [CVE-2025-32732](https://cve.now/CVE-2025-32732.md): Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. (CVSS 5.8, Intel(R) QAT Windows software)
- [CVE-2025-32449](https://cve.now/CVE-2025-32449.md): Unquoted search path for some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of priv (CVSS 5.4, PRI Driver software)
- [CVE-2025-32446](https://cve.now/CVE-2025-32446.md): Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow (CVSS 6.8, Intel QuickAssist Technology software)
- [CVE-2025-32091](https://cve.now/CVE-2025-32091.md): Incorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring 1: Device Drivers may allow an escalation (CVSS 8.4, Intel(R) Arc(TM) B-series GPUs)
- [CVE-2025-32088](https://cve.now/CVE-2025-32088.md): Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. (CVSS 4.8, Intel(R) QAT Windows software)
- [CVE-2025-32038](https://cve.now/CVE-2025-32038.md): Uncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software before version 2025.0.1 within Ring 3 (CVSS 5.4, Intel oneAPI DPC++C++ Compiler software)
- [CVE-2025-32037](https://cve.now/CVE-2025-32037.md): Improper access control for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow a denial of service. (CVSS 2.0, Intel(R) PresentMon)
- [CVE-2025-32001](https://cve.now/CVE-2025-32001.md): Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow (CVSS 5.4, Intel(R) Processor Identification Utility)
- [CVE-2025-31948](https://cve.now/CVE-2025-31948.md): Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applications may allow a de (CVSS 4.8, Intel(R) oneAPI Math Kernel Library)
- [CVE-2025-31940](https://cve.now/CVE-2025-31940.md): Incorrect default permissions for some Intel(R) Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications ma (CVSS 5.4, Intel(R) Thread Director Visualizer software)
- [CVE-2025-31937](https://cve.now/CVE-2025-31937.md): Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. (CVSS 5.7, Intel(R) QAT Windows software)
- [CVE-2025-31931](https://cve.now/CVE-2025-31931.md): Uncontrolled search path for the Instrumentation and Tracing Technology API (ITT API) software before version 3.25.4 within Ring 3: User App (CVSS 5.4, Instrumentation and Tracing Technology API (ITT API) softwa…)
- [CVE-2025-31647](https://cve.now/CVE-2025-31647.md): Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escal (CVSS 5.4, Intel(R) Graphics Software)
- [CVE-2025-31645](https://cve.now/CVE-2025-31645.md): Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an es (CVSS 5.4, System Event Log Viewer Utility software)
- [CVE-2025-31146](https://cve.now/CVE-2025-31146.md): Time-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3: (CVSS 5.1, Intel Ethernet Adapter Complete Driver Pack software)
- [CVE-2025-30518](https://cve.now/CVE-2025-30518.md): Incorrect default permissions for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow an escalation of (CVSS 5.4, Intel(R) PresentMon)
- [CVE-2025-30509](https://cve.now/CVE-2025-30509.md): Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an (CVSS 4.8, Intel QuickAssist Technology software)
- [CVE-2025-30506](https://cve.now/CVE-2025-30506.md): Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escal (CVSS 5.4, Intel Driver and Support Assistant)
- [CVE-2025-30255](https://cve.now/CVE-2025-30255.md): Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allo (CVSS 8.3, Intel(R) PROSet/Wireless WiFi Software for Windows)
- [CVE-2025-30185](https://cve.now/CVE-2025-30185.md): Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a denial of service and escalation of privilege. (CVSS 8.3, Intel UEFI reference platforms)
- [CVE-2025-30182](https://cve.now/CVE-2025-30182.md): Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applicati (CVSS 5.4, Intel(R) Distribution for Python software installers)
- [CVE-2025-27725](https://cve.now/CVE-2025-27725.md): Time-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a denial of service. (CVSS 4.1, ACAT)
- [CVE-2025-27713](https://cve.now/CVE-2025-27713.md): Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. (CVSS 7.3, Intel(R) QAT Windows software)
- [CVE-2025-27712](https://cve.now/CVE-2025-27712.md): Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escal (CVSS 2.4, Intel(R) Neural Compressor software)
- [CVE-2025-27711](https://cve.now/CVE-2025-27711.md): Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User App (CVSS 5.4, Intel(R) One Boot Flash Update (Intel(R) OFU) software)
- [CVE-2025-27710](https://cve.now/CVE-2025-27710.md): Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. (CVSS 6.8, Intel(R) QAT Windows software)
- [CVE-2025-27249](https://cve.now/CVE-2025-27249.md): Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of servi (CVSS 6.8, Gaudi software)
- [CVE-2025-27246](https://cve.now/CVE-2025-27246.md): Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may a (CVSS 5.4, Intel(R) Processor Identification Utility)
- [CVE-2025-26694](https://cve.now/CVE-2025-26694.md): Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. (CVSS 6.8, Intel(R) QAT Windows software)
- [CVE-2025-26405](https://cve.now/CVE-2025-26405.md): Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of (CVSS 5.1, Intel(R) NPU Drivers)
- [CVE-2025-26402](https://cve.now/CVE-2025-26402.md): Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. (CVSS 6.8, Intel(R) NPU Drivers)
- [CVE-2025-25216](https://cve.now/CVE-2025-25216.md): Improper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow (CVSS 2.0, Intel(R) Graphics Drivers and Intel LTS kernels)
- [CVE-2025-25059](https://cve.now/CVE-2025-25059.md): Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applicat (CVSS 5.4, Intel(R) One Boot Flash Update (Intel(R) OFU) software)
- [CVE-2025-24918](https://cve.now/CVE-2025-24918.md): Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software and Intel(R) Server F (CVSS 5.4, Intel(R) Server Configuration Utility software and Intel(R)…)
- [CVE-2025-24863](https://cve.now/CVE-2025-24863.md): Improper privilege management for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow a (CVSS 6.0, Intel(R) CIP software)
- [CVE-2025-24862](https://cve.now/CVE-2025-24862.md): Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applic (CVSS 2.0, Intel(R) CIP software)
- [CVE-2025-24848](https://cve.now/CVE-2025-24848.md): Protection mechanism failure for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow an (CVSS 5.4, Intel(R) CIP software)
- [CVE-2025-24847](https://cve.now/CVE-2025-24847.md): Improper input validation for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow an in (CVSS 5.7, Intel(R) CIP software)
- [CVE-2025-24842](https://cve.now/CVE-2025-24842.md): Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalati (CVSS 5.4, Intel(R) System Support Utility)
- [CVE-2025-24838](https://cve.now/CVE-2025-24838.md): Improper privilege management for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow a (CVSS 7.7, Intel(R) CIP software)
- [CVE-2025-24834](https://cve.now/CVE-2025-24834.md): Protection mechanism failure for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow an (CVSS 6.0, Intel(R) CIP software)
- [CVE-2025-24519](https://cve.now/CVE-2025-24519.md): Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. (CVSS 6.8, Intel(R) QAT Windows software)
- [CVE-2025-24516](https://cve.now/CVE-2025-24516.md): Improper access control for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow an info (CVSS 6.8, Intel(R) CIP software)
- [CVE-2025-24512](https://cve.now/CVE-2025-24512.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers ma (CVSS 5.7, Intel(R) PROSet/Wireless WiFi Software for Windows)
- [CVE-2025-24491](https://cve.now/CVE-2025-24491.md): Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: Use (CVSS 5.4, Intel(R) Killer(TM) Performance Suite software)
- [CVE-2025-24327](https://cve.now/CVE-2025-24327.md): Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applicati (CVSS 5.4, Intel(R) Rapid Storage Technology Application)
- [CVE-2025-24314](https://cve.now/CVE-2025-24314.md): Improper access control for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow an info (CVSS 2.1, Intel(R) CIP software)
- [CVE-2025-24307](https://cve.now/CVE-2025-24307.md): Improper privilege management for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow a (CVSS 2.3, Intel(R) CIP software)
- [CVE-2025-24299](https://cve.now/CVE-2025-24299.md): Improper input validation for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow an es (CVSS 8.7, Intel(R) CIP software)
- [CVE-2025-22391](https://cve.now/CVE-2025-22391.md): Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. (CVSS 5.4, SigTest)
- [CVE-2025-20622](https://cve.now/CVE-2025-20622.md): Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before version 32.0.100.4023 (CVSS 2.0, Intel(R) NPU Drivers for Windows)
- [CVE-2025-20614](https://cve.now/CVE-2025-20614.md): External control of file name or path for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may (CVSS 5.6, Intel(R) CIP software)
- [CVE-2025-20065](https://cve.now/CVE-2025-20065.md): Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow (CVSS 5.4, Display Virtualization for Windows OS software)
- [CVE-2025-20056](https://cve.now/CVE-2025-20056.md): Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of pr (CVSS 4.8, Intel VTune Profiler)
- [CVE-2025-20050](https://cve.now/CVE-2025-20050.md): Uncontrolled search path for some Intel(R) CIP software before version WIN\_DCA\_2.4.0.11001 within Ring 3: User Applications may allow an esc (CVSS 5.4, Intel(R) CIP software)
- [CVE-2025-20010](https://cve.now/CVE-2025-20010.md): Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Appl (CVSS 8.5, Intel(R) Processor Identification Utility)
- [CVE-2025-33186](https://cve.now/CVE-2025-33186.md): NVIDIA AIStore contains a vulnerability in AuthN. (CVSS 8.8, AuthN component of NVIDIA AIStore)
- [CVE-2025-33185](https://cve.now/CVE-2025-33185.md): NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. (CVSS 5.3, AuthN component of NVIDIA AIStore)
- [CVE-2025-33202](https://cve.now/CVE-2025-33202.md): NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extr (CVSS 6.5, NVIDIA Triton Inference Server)
- [CVE-2025-33178](https://cve.now/CVE-2025-33178.md): NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2025-23361](https://cve.now/CVE-2025-23361.md): NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause imprope (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2025-12944](https://cve.now/CVE-2025-12944.md): Improper input validation in NETGEAR DGN2200v4 (CVSS 6.8, NETGEAR DGN2200v4)
- [CVE-2025-12943](https://cve.now/CVE-2025-12943.md): Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300 (CVSS 5.2, NETGEAR RAX30 · NETGEAR RAXE300)
- [CVE-2025-12942](https://cve.now/CVE-2025-12942.md): Improper input validation in NETGEAR R6260 and R6850 (CVSS 4.8, NETGEAR R6260 · NETGEAR R6850)
- [CVE-2025-12940](https://cve.now/CVE-2025-12940.md): Credentials recorded in logs in NETGEAR WAX610 and WAX610Y (CVSS 0.5, NETGEAR WAX610 · NETGEAR WAX610Y)
- [CVE-2025-23357](https://cve.now/CVE-2025-23357.md): NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code inje (CVSS 7.8, NVIDIA Megatron-LM)
- [CVE-2025-13032](https://cve.now/CVE-2025-13032.md): Double fetch in sandbox kernel driver in Avast/AVG Antivirus \<25.3 on windows allows local attacker to escalate privelages via pool overflo (CVSS 9.9, Avast (Free/Premiium/Ultimeat) Antivirus · Avsat One +1)
- [CVE-2025-10905](https://cve.now/CVE-2025-10905.md): Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection (CVSS 4.4, Avast Free Antivirus)
- [CVE-2025-13027](https://cve.now/CVE-2025-13027.md): Memory safety bugs fixed in Firefox 145 and Thunderbird 145 (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13020](https://cve.now/CVE-2025-13020.md): Use-after-free in the WebRTC: Audio/Video component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13019](https://cve.now/CVE-2025-13019.md): Same-origin policy bypass in the DOM: Workers component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13018](https://cve.now/CVE-2025-13018.md): Mitigation bypass in the DOM: Security component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13017](https://cve.now/CVE-2025-13017.md): Same-origin policy bypass in the DOM: Notifications component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13026](https://cve.now/CVE-2025-13026.md): Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13025](https://cve.now/CVE-2025-13025.md): Incorrect boundary conditions in the Graphics: WebGPU component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13024](https://cve.now/CVE-2025-13024.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13016](https://cve.now/CVE-2025-13016.md): Incorrect boundary conditions in the JavaScript: WebAssembly component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13023](https://cve.now/CVE-2025-13023.md): Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13022](https://cve.now/CVE-2025-13022.md): Incorrect boundary conditions in the Graphics: WebGPU component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13021](https://cve.now/CVE-2025-13021.md): Incorrect boundary conditions in the Graphics: WebGPU component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13015](https://cve.now/CVE-2025-13015.md): Spoofing issue in Firefox (CVSS 3.4, Mozilla Firefox)
- [CVE-2025-13014](https://cve.now/CVE-2025-13014.md): Use-after-free in the Audio/Video component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13013](https://cve.now/CVE-2025-13013.md): Mitigation bypass in the DOM: Core & HTML component (CVSS 6.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-13012](https://cve.now/CVE-2025-13012.md): Race condition in the Graphics component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9408](https://cve.now/CVE-2025-9408.md): Userspace privilege escalation vulnerability on Cortex M (CVSS 8.2, zephyrproject-rtos Zephyr)
- [CVE-2025-10918](https://cve.now/CVE-2025-10918.md): Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write (CVSS 7.1, Ivanti Endpoint Manager)
- [CVE-2025-64773](https://cve.now/CVE-2025-64773.md): In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit (CVSS 2.7, JetBrains YouTrack)
- [CVE-2025-11959](https://cve.now/CVE-2025-11959.md): Improper Access Control in Premierturk's Excavation Management Information System (CVSS 8.1, Premierturk Information Technologies Excavation Management…)
- [CVE-2025-11697](https://cve.now/CVE-2025-11697.md): Studio 5000 ® Simulation Interface Local Code Execution (CVSS 8.9, Rockwell Automation Studio 5000 ® Simulation Interface)
- [CVE-2025-11696](https://cve.now/CVE-2025-11696.md): Studio 5000 ® Simulation Interface SSRF (CVSS 8.9, Rockwell Automation Studio 5000® Simulation Interface™)
- [CVE-2025-12101](https://cve.now/CVE-2025-12101.md): Cross-Site Scripting (XSS) (CVSS 5.9, NetScaler ADC · NetScaler Gateway)
- [CVE-2025-11862](https://cve.now/CVE-2025-11862.md): Verve Asset Manager Access Control Vulnerability (CVSS 8.4, Rockwell Automation Verve Asset Manager)
- [CVE-2025-11085](https://cve.now/CVE-2025-11085.md): FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS (CVSS 8.6, Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud)
- [CVE-2025-9227](https://cve.now/CVE-2025-9227.md): Stored XSS (CVSS 6.5, Zohocorp ManageEngine OpManager)
- [CVE-2025-11084](https://cve.now/CVE-2025-11084.md): FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass (CVSS 7.6, Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud)
- [CVE-2025-9223](https://cve.now/CVE-2025-9223.md): Command Injection (CVSS 8.8, Zohocorp ManageEngine Applications Manager)
- [CVE-2025-8324](https://cve.now/CVE-2025-8324.md): SQL Injection (CVSS 9.8, Zohocorp ManageEngine Analytics Plus)
- [CVE-2025-10161](https://cve.now/CVE-2025-10161.md): Authentication Bypass in Turkguven's Perfektive (CVSS 7.3, Turkguven Software Technologies Perfektive)
- [CVE-2025-41106](https://cve.now/CVE-2025-41106.md): Multiple vulnerabilities in Fairsketch's RISE CRM Framework (CVSS 5.1, Fairsketch RISE CRM Framework)
- [CVE-2025-41105](https://cve.now/CVE-2025-41105.md): Multiple vulnerabilities in Fairsketch's RISE CRM Framework (CVSS 5.1, Fairsketch RISE CRM Framework)
- [CVE-2025-41104](https://cve.now/CVE-2025-41104.md): Multiple vulnerabilities in Fairsketch's RISE CRM Framework (CVSS 5.1, Fairsketch RISE CRM Framework)
- [CVE-2025-41103](https://cve.now/CVE-2025-41103.md): Multiple vulnerabilities in Fairsketch's RISE CRM Framework (CVSS 5.1, Fairsketch RISE CRM Framework)
- [CVE-2025-41102](https://cve.now/CVE-2025-41102.md): Multiple vulnerabilities in Fairsketch's RISE CRM Framework (CVSS 5.1, Fairsketch RISE CRM Framework)
- [CVE-2025-41101](https://cve.now/CVE-2025-41101.md): Multiple vulnerabilities in Fairsketch's RISE CRM Framework (CVSS 5.1, Fairsketch RISE CRM Framework)
- [CVE-2025-11960](https://cve.now/CVE-2025-11960.md): Reflected XSS in Aryom's KVKNET (CVSS 6.1, Aryom Software High Technology Systems KVKNET)
- [CVE-2025-12846](https://cve.now/CVE-2025-12846.md): Blocksy Companion \<= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass (CVSS 8.8, creativethemeshq Blocksy Companion)
- [CVE-2025-12788](https://cve.now/CVE-2025-12788.md): Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings \<= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass (CVSS 5.3, themefic Hydra Booking — Appointment Scheduling & Booking C…)
- [CVE-2025-12953](https://cve.now/CVE-2025-12953.md): Classified Listing – AI-Powered Classified ads & Business Directory Plugin \<= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering (CVSS 4.3, techlabpro1 Classified Listing – AI-Powered Classified ads…)
- [CVE-2025-12787](https://cve.now/CVE-2025-12787.md): Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings \<= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation (CVSS 5.3, themefic Hydra Booking — Appointment Scheduling & Booking C…)
- [CVE-2025-12539](https://cve.now/CVE-2025-12539.md): TNC Toolbox: Web Performance \<= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover (CVSS 10.0, leopardhost TNC Toolbox: Web Performance)
- [CVE-2025-7633](https://cve.now/CVE-2025-7633.md): Stored XSS (CVSS 7.3, Zohocorp ManageEngine Exchange Reporter Plus)
- [CVE-2025-7632](https://cve.now/CVE-2025-7632.md): Stored XSS (CVSS 7.3, Zohocorp ManageEngine Exchange Reporter Plus)
- [CVE-2025-7430](https://cve.now/CVE-2025-7430.md): Stored XSS (CVSS 7.3, Zohocorp ManageEngine Exchange Reporter Plus)
- [CVE-2017-20210](https://cve.now/CVE-2017-20210.md): Photo Station (CVSS 9.8, QNAP Systems Photo Station)
- [CVE-2025-5317](https://cve.now/CVE-2025-5317.md): Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac (CVSS 6.8, Bitdefender Endpoint Security Tools for Mac)
- [CVE-2025-7429](https://cve.now/CVE-2025-7429.md): Stored XSS (CVSS 7.3, Zohocorp ManageEngine Exchange Reporter Plus)
- [CVE-2025-9055](https://cve.now/CVE-2025-9055.md): The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges (CVSS 6.4, Axis Communications AB AXIS OS)
- [CVE-2025-8998](https://cve.now/CVE-2025-8998.md): It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. (CVSS 3.1, Axis Communications AB AXIS OS)
- [CVE-2025-9524](https://cve.now/CVE-2025-9524.md): The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. (CVSS 4.3, Axis Communications AB AXIS OS)
- [CVE-2025-10714](https://cve.now/CVE-2025-10714.md): AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsof (CVSS 8.4, Axis Communications AB AXIS Optimizer)
- [CVE-2025-8108](https://cve.now/CVE-2025-8108.md): An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2025-6779](https://cve.now/CVE-2025-6779.md): An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2025-6571](https://cve.now/CVE-2025-6571.md): A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it. (CVSS 6.0, Axis Communications AB AXIS OS)
- [CVE-2025-5452](https://cve.now/CVE-2025-5452.md): A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to pot (CVSS 6.6, Axis Communications AB AXIS OS)
- [CVE-2025-6298](https://cve.now/CVE-2025-6298.md): ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2025-5718](https://cve.now/CVE-2025-5718.md): The ACAP Application framework could allow privilege escalation through a symlink attack. (CVSS 6.8, Axis Communications AB AXIS OS)
- [CVE-2025-5454](https://cve.now/CVE-2025-5454.md): An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege esca (CVSS 6.4, Axis Communications AB AXIS OS)
- [CVE-2025-4645](https://cve.now/CVE-2025-4645.md): An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. (CVSS 6.7, Axis Communications AB AXIS OS)
- [CVE-2025-11855](https://cve.now/CVE-2025-11855.md): Age Restriction \<= 3.0.2 - Subscriber+ Privilege Escalation (CVSS 7.5, age-restriction)
- [CVE-2025-11307](https://cve.now/CVE-2025-11307.md): WP Google Maps \< 9.0.48 - Unauthenticated Stored XSS (CVSS 8.8, WP Go Maps)
- [CVE-2025-11237](https://cve.now/CVE-2025-11237.md): Make Email Customizer for WooCommerce \<= 1.0.6 - Subscriber+ Arbitrary Options Update (CVSS 5.3, Make Email Customizer for WooCommerce)
- [CVE-2025-12667](https://cve.now/CVE-2025-12667.md): GitHub Gist Shortcode Plugin \<= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, paul1999 GitHub Gist Shortcode Plugin)
- [CVE-2025-12651](https://cve.now/CVE-2025-12651.md): Live Photos on WordPress \<= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, eggemplo Live Photos on WordPress)
- [CVE-2025-12019](https://cve.now/CVE-2025-12019.md): Featured Image \<= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, mervinpraison Featured Image)
- [CVE-2025-11521](https://cve.now/CVE-2025-11521.md): Astra Security Suite – Firewall & Malware Scan \<= 0.2 - Unauthenticated Arbitrary File Upload (CVSS 8.1, astrasecuritysuite Astra Security Suite – Firewall & Malwar…)
- [CVE-2025-11999](https://cve.now/CVE-2025-11999.md): Add Multiple Marker \<= 1.2 - Missing Authorization to Unauthenticated Settings Update (CVSS 5.3, krishaweb Multi Location Marker)
- [CVE-2025-12662](https://cve.now/CVE-2025-12662.md): Coon Google Maps \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, andrico Coon Google Maps)
- [CVE-2025-11129](https://cve.now/CVE-2025-11129.md): Include fussball.de Widgets \<= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type' (CVSS 6.4, mheob Include Fussball.de Widgets)
- [CVE-2025-11986](https://cve.now/CVE-2025-11986.md): Crypto Tool \<= 2.22 - Unauthenticated Information Exposure via Global Authentication State (CVSS 5.3, odude Crypto Tool)
- [CVE-2025-12126](https://cve.now/CVE-2025-12126.md): The Total Book Project \<= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation (CVSS 5.4, ryanmoyer The Total Book Project)
- [CVE-2025-12637](https://cve.now/CVE-2025-12637.md): Elastic Theme Editor \<= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, koopersmith Elastic Theme Editor)
- [CVE-2025-11882](https://cve.now/CVE-2025-11882.md): Simple Donate \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, ethoseo Simple Donate)
- [CVE-2025-12663](https://cve.now/CVE-2025-12663.md): Jeba Cute forkit \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, jahed Jeba Cute forkit)
- [CVE-2025-11860](https://cve.now/CVE-2025-11860.md): Twitter Feed \<= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, caselock Twitter Feed)
- [CVE-2025-11821](https://cve.now/CVE-2025-11821.md): Woocommerce – Products By Custom Tax \<= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, elvismdev Woocommerce – Products By Custom Tax)
- [CVE-2025-12668](https://cve.now/CVE-2025-12668.md): WP Count Down Timer \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, sitedin WP Count Down Timer)
- [CVE-2025-12658](https://cve.now/CVE-2025-12658.md): Preload Current Images \<= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, mmdeveloper Preload Current Images)
- [CVE-2025-11859](https://cve.now/CVE-2025-11859.md): Paypal Donation Shortcode \<= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, coenjacobs Paypal Donation Shortcode)
- [CVE-2025-11532](https://cve.now/CVE-2025-11532.md): Wisly \<= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation (CVSS 5.3, softivus Wisly)
- [CVE-2025-12631](https://cve.now/CVE-2025-12631.md): Squirrels Auto Inventory \<= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, spokanetony Squirrels Auto Inventory)
- [CVE-2025-12665](https://cve.now/CVE-2025-12665.md): Ninja Countdown \<= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletion (CVSS 4.3, lovelightplugins Ninja Countdown | Fastest Countdown Builder)
- [CVE-2025-12671](https://cve.now/CVE-2025-12671.md): WP-Iconics \<= 0.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, mrx3k1 WP-Iconics)
- [CVE-2025-11869](https://cve.now/CVE-2025-11869.md): Precise Columns \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, simonpedge Precise Columns)
- [CVE-2025-12526](https://cve.now/CVE-2025-12526.md): Private Google Calendars \<= 20250811 - Missing Authorization to Authenticated (Subscriber+) Settings Reset (CVSS 4.3, michielve Private Google Calendars)
- [CVE-2025-11828](https://cve.now/CVE-2025-11828.md): Magazine Companion \<= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, pubudu-malalasekara Post Blocks & Tools)
- [CVE-2025-12753](https://cve.now/CVE-2025-12753.md): Chart Expert \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, sagortouch Chart Expert)
- [CVE-2025-11170](https://cve.now/CVE-2025-11170.md): WP移行専用プラグイン for CPI \<= 1.0.2 - Unauthenticated Arbitrary File Upload (CVSS 9.8, kddiwebcommunications WP移行専用プラグイン for CPI)
- [CVE-2025-12711](https://cve.now/CVE-2025-12711.md): Share to Google Classroom \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share\_to\_google Shortcode (CVSS 6.4, pritenhshah Share to Google Classroom)
- [CVE-2025-12813](https://cve.now/CVE-2025-12813.md): Holiday class post calendar \<= 7.1 - Unauthenticated Remote Code Execution via 'contents' (CVSS 9.8, strix-bubol5 Holiday class post calendar)
- [CVE-2025-11457](https://cve.now/CVE-2025-11457.md): EasyCommerce – AI-Powered, Blazing-Fast & Beautiful WordPress Ecommerce Plugin 0.9.0-beta2 - 1.8.2 - Unauthenticated Privilege Escalation (CVSS 9.8, EasyCommerce – AI-Powered WordPress Ecommerce Plugin to Sel…)
- [CVE-2025-11856](https://cve.now/CVE-2025-11856.md): Eventbee Ticketing Widget \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Eventbee Ticketing Widget)
- [CVE-2025-12590](https://cve.now/CVE-2025-12590.md): YSlider \<= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, andreaferracani YSlider)
- [CVE-2025-12021](https://cve.now/CVE-2025-12021.md): WP-OAuth \<= 0.4.1 - Reflected Cross-Site Scripting (CVSS 6.1, hectavex WP-OAuth)
- [CVE-2025-12588](https://cve.now/CVE-2025-12588.md): USB Qr Code Scanner For Woocommerce \<= 1.0.0 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, behzadrohizadeh USB Qr Code Scanner For Woocommerce)
- [CVE-2025-12020](https://cve.now/CVE-2025-12020.md): Double the Donation \<= 3.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.9, kanwei\_doublethedonation Double the Donation – A workplace…)
- [CVE-2025-12132](https://cve.now/CVE-2025-12132.md): WP Custom Admin Login Page Logo \<= 1.4.8.4 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, larsactionhero WP Custom Admin Login Page Logo)
- [CVE-2025-12589](https://cve.now/CVE-2025-12589.md): WP-Walla \<= 0.5.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, baronen WP-Walla)
- [CVE-2025-12672](https://cve.now/CVE-2025-12672.md): Flickr Show \<= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, nuvuscripts Flickr Show)
- [CVE-2025-11997](https://cve.now/CVE-2025-11997.md): Document Pro Elementor – Documentation & Knowledge Base \<= 1.0.9 - Unauthenticated Information Exposure (CVSS 5.3, ngothoai Document Pro Elementor – Documentation & Knowledge…)
- [CVE-2025-11451](https://cve.now/CVE-2025-11451.md): Auto Amazon Links – Amazon Associates Affiliate Plugin \<= 5.4.3 - Unauthenticated Arbitrary File Read (CVSS 7.5, miunosoft Auto Amazon Links – Amazon Associates Affiliate P…)
- [CVE-2025-12010](https://cve.now/CVE-2025-12010.md): Authors List \<= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode (CVSS 6.5, wpkube Authors List)
- [CVE-2025-12754](https://cve.now/CVE-2025-12754.md): Geopost \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, rampantlogic Geopost)
- [CVE-2025-11805](https://cve.now/CVE-2025-11805.md): Skip to Timestamp \<= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, doytch Skip to Timestamp)
- [CVE-2025-12644](https://cve.now/CVE-2025-12644.md): Nonaki – Drag and Drop Email Template builder and Newsletter plugin for WordPress \<= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields (CVSS 6.4, wpcox Nonaki – Drag and Drop Email Template builder and New…)
- [CVE-2025-11886](https://cve.now/CVE-2025-11886.md): CTL Arcade Lite \<= 1.0 - Cross-Site Request Forgery to Plugin Activation and Deactivation (CVSS 4.3, codethislab CTL Arcade Lite)
- [CVE-2025-12632](https://cve.now/CVE-2025-12632.md): RandomQuotr \<= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 5.5, loveless RandomQuotr)
- [CVE-2025-12538](https://cve.now/CVE-2025-12538.md): Fleet Manager \<= 2.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting (CVSS 4.4, iworks Fleet Manager)
- [CVE-2025-12880](https://cve.now/CVE-2025-12880.md): Progress Bar Blocks for Gutenberg \<= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG (CVSS 5.4, jobayer534 Progress Bar Blocks for Gutenberg)
- [CVE-2025-11996](https://cve.now/CVE-2025-11996.md): Find Unused Images \<= 1.0.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion (CVSS 5.3, toastwebsites Find Unused Images)
- [CVE-2025-11863](https://cve.now/CVE-2025-11863.md): My Geo Posts Free \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, mindstien My Geo Posts Free)
- [CVE-2025-11988](https://cve.now/CVE-2025-11988.md): Crypto Tool \<= 2.22 - Missing Authentication to Unauthenticated Limited File Deletion (CVSS 5.3, odude Crypto Tool)
- [CVE-2025-11829](https://cve.now/CVE-2025-11829.md): Five9 Live Chat \<= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Five9 Live Chat)
- [CVE-2025-12652](https://cve.now/CVE-2025-12652.md): Ungapped Widgets \<= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, oscaruribe Ungapped Widgets)
- [CVE-2025-11168](https://cve.now/CVE-2025-11168.md): Mementor Core \<= 2.2.5 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, mvirik Mementor Core)
- [CVE-2025-11873](https://cve.now/CVE-2025-11873.md): WP BBCode \<= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, eflyjason WP BBCode)
- [CVE-2025-11874](https://cve.now/CVE-2025-11874.md): Slippy Slider – Responsive Touch Navigation Slider \<= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4, mitegvg Slippy Slider – Responsive Touch Navigation Slider)
- [CVE-2025-11891](https://cve.now/CVE-2025-11891.md): Shelf Planner \<= 2.8.1 - Unauthenticated Information Exposure via Log Files (CVSS 5.3, shelfplanner Shelf Planner Inventory Management for WooComm…)
- [CVE-2025-11822](https://cve.now/CVE-2025-11822.md): WP Bootstrap Tabs \<= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, virtus-designs WP Bootstrap Tabs)
- [CVE-2025-11894](https://cve.now/CVE-2025-11894.md): Shelf Planner \<= 2.8.1 - Missing Authorization to Unauthenticated Settings Update (CVSS 5.3, shelfplanner Shelf Planner Inventory Management for WooComm…)
- [CVE-2025-31719](https://cve.now/CVE-2025-31719.md): In TEE EcDSA algorithm, there is a possible memory consistency issue. (CVSS 5.1, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2025-42940](https://cve.now/CVE-2025-42940.md): Memory Corruption vulnerability in SAP CommonCryptoLib (CVSS 7.5, SAP\_SE SAP CommonCryptoLib)
- [CVE-2025-42924](https://cve.now/CVE-2025-42924.md): Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP) (CVSS 6.1, SAP\_SE SAP S/4HANA landscape)
- [CVE-2025-42919](https://cve.now/CVE-2025-42919.md): Information Disclosure vulnerability in SAP NetWeaver Application Server Java (CVSS 5.3, SAP\_SE SAP NetWeaver Application Server Java)
- [CVE-2025-42899](https://cve.now/CVE-2025-42899.md): Missing Authorization check in SAP S4CORE (Manage Journal Entries) (CVSS 4.3, SAP\_SE SAP S4CORE)
- [CVE-2025-42897](https://cve.now/CVE-2025-42897.md): Information Disclosure vulnerability in SAP Business One (SLD) (CVSS 5.3, SAP\_SE SAP Business One)
- [CVE-2025-42895](https://cve.now/CVE-2025-42895.md): Code Injection vulnerability in SAP HANA JDBC Client (CVSS 6.9, SAP\_SE SAP HANA JDBC Client)
- [CVE-2025-42894](https://cve.now/CVE-2025-42894.md): Path Traversal vulnerability in SAP Business Connector (CVSS 6.8, SAP\_SE SAP Business Connector)
- [CVE-2025-42893](https://cve.now/CVE-2025-42893.md): Open Redirect vulnerability in SAP Business Connector (CVSS 6.1, SAP\_SE SAP Business Connector)
- [CVE-2025-42892](https://cve.now/CVE-2025-42892.md): OS Command Injection vulnerability in SAP Business Connector (CVSS 6.8, SAP\_SE SAP Business Connector)
- [CVE-2025-42890](https://cve.now/CVE-2025-42890.md): Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui) (CVSS 10.0, SAP\_SE SQL Anywhere Monitor)
- [CVE-2025-42889](https://cve.now/CVE-2025-42889.md): SQL Injection vulnerability in SAP Starter Solution (PL SAFT) (CVSS 5.4, SAP\_SE SAP Starter Solution)
- [CVE-2025-42888](https://cve.now/CVE-2025-42888.md): Information Disclosure vulnerability in SAP GUI for Windows (CVSS 5.5, SAP\_SE SAP GUI for Windows)
- [CVE-2025-42887](https://cve.now/CVE-2025-42887.md): Code Injection vulnerability in SAP Solution Manager (CVSS 9.9, SAP\_SE SAP Solution Manager)
- [CVE-2025-42886](https://cve.now/CVE-2025-42886.md): Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector (CVSS 6.1, SAP\_SE SAP Business Connector)
- [CVE-2025-42885](https://cve.now/CVE-2025-42885.md): Missing authentication in SAP HANA 2.0 (hdbrss) (CVSS 5.8, SAP\_SE SAP HANA)
- [CVE-2025-42884](https://cve.now/CVE-2025-42884.md): JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.5, SAP\_SE SAP NetWeaver Enterprise Portal)
- [CVE-2025-42883](https://cve.now/CVE-2025-42883.md): Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) (CVSS 2.7, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2025-42882](https://cve.now/CVE-2025-42882.md): Missing Authorization check in SAP NetWeaver Application Server for ABAP (CVSS 4.3, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2024-57695](https://cve.now/CVE-2024-57695.md): An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a local attacker to execute arbitrary code v (CVSS 7.7)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-11-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.