CVEs.

Matching CVEs

1. 7.8High

   CVE-2025-62199 ↗ (opens in a new tab)

   Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Nov 11, 2025

2. 7.8High

   CVE-2025-60727 ↗ (opens in a new tab)

   Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Nov 11, 2025

3. 7.1High

   CVE-2025-60726 ↗ (opens in a new tab)

   Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

   M3Microsoft 365· Nov 11, 2025

4. 7.3High

   CVE-2025-59504 ↗ (opens in a new tab)

   Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.

   MAMicrosoft Azure· Nov 11, 2025

5. 8.8High

   CVE-2025-33186 ↗ (opens in a new tab)

   NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering.

   NVNVIDIA· Nov 11, 2025

6. 7.8High

   CVE-2025-33178 ↗ (opens in a new tab)

   NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data tampering.

   NVNVIDIA· Nov 11, 2025

7. 7.8High

   CVE-2025-23361 ↗ (opens in a new tab)

   NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

   NVNVIDIA· Nov 11, 2025

8. 7.8High

   CVE-2025-23357 ↗ (opens in a new tab)

   NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.

   NVNVIDIA· Nov 11, 2025

9. 8.6High

   CVE-2025-11892 ↗ (opens in a new tab)

   An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have access to the target GitHub Enterprise Server instance and to entice a user, while operating in sudo mode, to click on a crafted malicious link to perform actions that require elevated privileges. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.18.1, 3.17.7, 3.16.10, 3.15

   GIGitHub· Nov 10, 2025

10. 7.5High

    CVE-2025-11578 ↗ (opens in a new tab)

    A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploiting a symlink escape in pre-receive hook environments. By crafting a malicious repository and environment, an attacker could replace system binaries during hook cleanup and execute a payload that adds their own SSH key to the root user’s authorized keys—thereby granting themselves root SSH access to the server. To exploit this vulnerability, the attacker needed to have enterprise admin privileges. This vulnerability af

    GIGitHub· Nov 10, 2025

11. 8.8High

    CVE-2025-37736 ↗ (opens in a new tab)

    Improper Authorization in Elastic Cloud Enterprise can lead to Privilege Escalation where the built-in readonly user can call APIs that should not be allowed. The list of APIs that are affected by this issue is: post:/platform/configuration/security/service-accounts delete:/platform/configuration/security/service-accounts/{user_id} patch:/platform/configuration/security/service-accounts/{user_id} post:/platform/configuration/security/service-accounts/{user_id}/keys delete:/platform/configuration/security/service-accounts/{user_id}/keys/{api_key_id} patch:/user post:/users post:/users/auth/keys

    ECElastic Cloud· Nov 7, 2025

12. 7.8High

    CVE-2025-9458 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Nov 7, 2025

13. 8.2High

    CVE-2025-27919 ↗ (opens in a new tab)

    An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later connect without this counterparty confirmation.

    ANAnyDesk· Nov 6, 2025

14. 7.5High

    CVE-2025-27917 ↗ (opens in a new tab)

    An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory allocation and a NULL pointer dereference.

    ANAnyDesk· Nov 6, 2025

15. 7.5High

    CVE-2025-27916 ↗ (opens in a new tab)

    An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID.

    ANAnyDesk· Nov 6, 2025

16. 7.8High

    CVE-2025-10885 ↗ (opens in a new tab)

    A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM due to an insufficient validation of loaded binaries. An attacker with local and low-privilege access could exploit this to execute code as SYSTEM.

    AUAutodesk· Nov 6, 2025

17. 7.0High

    CVE-2025-37735 ↗ (opens in a new tab)

    Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM. In some cases, this could result in local privilege escalation.

    ECElastic Cloud· Nov 6, 2025

18. 8.7High

    CVE-2025-64110 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files that should be protected via cursorignore. An attacker who has already achieved prompt injection, or a malicious model, could create a new cursorignore file which can invalidate the configuration of pre-existing ones. This could allow a malicious agent to read protected files. This issue is fixed in version 2.0.

    CUCursor· Nov 5, 2025

19. 8.8High

    CVE-2025-64108 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to circumvent sensitive file protections and overwrite files which Cursor requires human approval to overwrite. Modification of some of the protected files can lead to RCE. Must be chained with a prompt injection or malicious model attach. Only affects systems supporting NTFS. This issue is fixed in version 2.0.

    CUCursor· Nov 4, 2025

20. 8.8High

    CVE-2025-64107 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects path manipulation via forward slashes (./.cursor/./././././mcp.json etc.), and requires human approval to complete the operation. However, the same kind of manipulation using backslashes was not correctly detected, allowing an attacker who had already achieved prompt injection or some other level of control to overwrite sensitive editor files without approval on Windows machines. This issue is fixed in version 2.0.

    CUCursor· Nov 4, 2025

21. 8.8High

    CVE-2025-64106 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the server. If an attacker is able to convince a victim to navigate to a malicious deeplink, the victim will not see the correct speedbump modal, and if they choose to accept, will execute commands specified by the attackers deeplink.

    CUCursor· Nov 4, 2025

22. 8.2High

    CVE-2025-23358 ↗ (opens in a new tab)

    NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.

    NVNVIDIA· Nov 4, 2025

23. 7.5High

    CVE-2025-9954 ↗ (opens in a new tab)

    Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.

    ACAcquia· Oct 30, 2025

24. 8.8High

    CVE-2025-11702 ↗ (opens in a new tab)

    GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.

    GIGitLab· Oct 29, 2025

25. 8.8High

    CVE-2025-9164 ↗ (opens in a new tab)

    Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0.

    DODocker· Oct 27, 2025

26. 8.1High

    CVE-2025-11989 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions.

    GIGitLab· Oct 27, 2025

27. 7.5High

    CVE-2025-11447 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads.

    GIGitLab· Oct 27, 2025

28. 7.5High

    CVE-2025-10497 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads.

    GIGitLab· Oct 27, 2025

29. 8.8High

    CVE-2025-59500 ↗ (opens in a new tab)

    Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Oct 23, 2025

30. 8.8High

    CVE-2025-12100 ↗ (opens in a new tab)

    Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6.

    MAMongoDB Atlas· Oct 23, 2025

31. 7.5High

    CVE-2025-12044 ↗ (opens in a new tab)

    Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads. This occurs due to a regression from a previous fix for [+HCSEC-2025-24+|https://discuss.hashicorp.com/t/hcsec-2025-24-vault-denial-of-service-though-complex-json-payloads/76393] which allowed for processing JSON payloads before applying rate limits. This vulnerability, CVE-2025-12044, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.16.27, 1.19.11, 1.20.5, and 1.21.0.

    HAHashiCorp (HCP / Terraform Cloud)· Oct 23, 2025

32. 7.8High

    CVE-2025-23352 ↗ (opens in a new tab)

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· Oct 23, 2025

33. 7.8High

    CVE-2025-23347 ↗ (opens in a new tab)

    NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVNVIDIA· Oct 23, 2025

34. 8.1High

    CVE-2025-11621 ↗ (opens in a new tab)

    Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5, 1.19.11, and 1.16.27

    HAHashiCorp (HCP / Terraform Cloud)· Oct 23, 2025

35. 7.5High

    CVE-2025-62399 ↗ (opens in a new tab)

    Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.

    MOMoodle· Oct 23, 2025

36. 8.8High

    CVE-2025-11575 ↗ (opens in a new tab)

    Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0.

    MAMongoDB Atlas· Oct 23, 2025

37. 8.7High

    CVE-2025-22167 ↗ (opens in a new tab)

    This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal (Arbitrary Write) vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem path writable by the Jira JVM process. Atlassian recommends that Jira Software Data Center and Server customers upgrade to the latest version; if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Jira Software Data Center and Server 9.12: Upgrade to a

    JIJira· Oct 22, 2025

38. 8.3High

    CVE-2025-22166 ↗ (opens in a new tab)

    This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 8.3, allows an attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center and Server 8.5: Upgrade to a release great

    COConfluence· Oct 21, 2025

39. 8.2High

    CVE-2024-56143 ↗ (opens in a new tab)

    Strapi is an open-source headless content management system. In versions from 5.0.0 to before 5.5.2, the lookup operator provided by the document service does not properly sanitize query parameters for private fields. An attacker can access private fields, including admin passwords and reset tokens, by crafting queries with the lookup parameter. This vulnerability is fixed in 5.5.2.

    SCStrapi Cloud· Oct 16, 2025

40. 8.1High

    CVE-2025-58075 ↗ (opens in a new tab)

    Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the RelayState

    MCMattermost Cloud· Oct 16, 2025

41. 8.1High

    CVE-2025-58073 ↗ (opens in a new tab)

    Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the OAuth state.

    MCMattermost Cloud· Oct 16, 2025

42. 7.4High

    CVE-2025-62371 ↗ (opens in a new tab)

    OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided. Prior to this fix, the OpenSearch sink and source plugins would automatically use a trust all SSL strategy when connecting to OpenSearch clusters if no certificate path was explicitly configured. This behavior bypasses SSL certificate validation, potentially allowing attackers to intercept and modify data in transit through man-in-the-middle attacks. The vu

    AWAmazon Web Services· Oct 15, 2025

43. 7.5High

    CVE-2025-58133 ↗ (opens in a new tab)

    Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.

    ZOZoom· Oct 15, 2025

44. 7.6High

    CVE-2025-33182 ↗ (opens in a new tab)

    NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree. A successful exploitation of this vulnerability might lead to data tampering, denial of service.

    NVNVIDIA· Oct 14, 2025

45. 8.4High

    CVE-2025-23356 ↗ (opens in a new tab)

    NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

    NVNVIDIA· Oct 14, 2025

46. 7.8High

    CVE-2025-59494 ↗ (opens in a new tab)

    Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

    MAMicrosoft Azure· Oct 14, 2025

47. 8.2High

    CVE-2025-59292 ↗ (opens in a new tab)

    External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.

    MAMicrosoft Azure· Oct 14, 2025

48. 8.2High

    CVE-2025-59291 ↗ (opens in a new tab)

    External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.

    MAMicrosoft Azure· Oct 14, 2025

49. 7.0High

    CVE-2025-59285 ↗ (opens in a new tab)

    Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

    MAMicrosoft Azure· Oct 14, 2025

50. 8.8High

    CVE-2025-59249 ↗ (opens in a new tab)

    Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

    M3Microsoft 365· Oct 14, 2025