Browse CVEs

MEDIUM 6.7 CVE-2025-20774 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002025-12-02 MEDIUM 6.5 CVE-2025-65406 A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial… Streaming Media No fix yet Fix from $1,6002025-12-01 HIGH 7.8 CVE-2025-8351 Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Co… Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-66217 AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catch… Ais Catcher 0.64+ Fix from $1,9502025-11-29 HIGH 7.5 CVE-2025-64330 Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versi… Suricata 7.0.13 / 8.0.2+ Fix from $1,9502025-11-26 CRITICAL 9.8 CVE-2025-65085 A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and pri… Argon after 12.2.1204.207 Fix from $2,3002025-11-25 CRITICAL 9.8 CVE-2025-64693 Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a spec… Mitigation only Fix from $2,3002025-11-25 HIGH 7.1 CVE-2025-65018 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From vers… Libpng 1.6.51+ Fix from $1,9502025-11-25 CRITICAL 9.1 CVE-2025-62608 MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when p… Mlx 0.29.4+ Fix from $2,3002025-11-21 MEDIUM 5.5 CVE-2025-64524 cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. … Cups Filters after 2.0.1 Fix from $1,6002025-11-20 HIGH 7.8 CVE-2025-46373 A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 throu… Forticlient 7.2.9 / 7.4.4+ Fix from $1,9502025-11-18 MEDIUM 6.8 CVE-2025-63701 A heap corruption vulnerability exists in the Advantech TP-3250 printer driver's DrvUI_x64_ADVANTECH.dll (v0.3.9200.20789) when DocumentPropertiesW()… Tp 3250 Firmware No fix yet Fix from $1,6002025-11-14 HIGH 7.8 CVE-2025-61837 Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Format Plugins Mitigation only Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61838 Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Format Plugins Mitigation only Fix from $1,9502025-11-11 HIGH 8.0 CVE-2025-62452 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows 10 1607 10.0.14393.8594 / 10.0.17763.8027+ Fix from $1,9502025-11-11 HIGH 8.8 CVE-2025-62220 Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. Windows Subsystem For Linux 2.6.2+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-62201 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20068+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61827 Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executi… Illustrator On Ipad 3.0.10+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61829 Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executi… Illustrator On Ipad 3.0.10+ Fix from $1,9502025-11-11 CRITICAL 9.8 CVE-2025-60724EPSS 6% Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. 365 Copilot 10.0.14393.8594 / 10.0.17763.8027+ Fix from $2,3002025-11-11 HIGH 7.8 CVE-2025-61819 Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… Photoshop 26.9+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61820 Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execu… Illustrator 29.8.3+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-60714 Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally. Windows 10 1607 10.0.14393.8594 / 10.0.17763.8027+ Fix from $1,9502025-11-11 HIGH 8.0 CVE-2025-60715 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network. Windows 10 1607 10.0.14393.8594 / 10.0.17763.8027+ Fix from $1,9502025-11-11 HIGH 7.3 CVE-2025-59504 Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally. Azure Monitor Agent 1.37.1+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61816 InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in … Incopy 20.5.1+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61824 InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.1+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61832 InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.1+ Fix from $1,9502025-11-11 HIGH 7.5 CVE-2025-62689 NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master br… Libmicrohttpd 2025-09-16+ Fix from $1,9502025-11-10 HIGH 7.8 CVE-2025-9458 A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can lev… Shared Components Mitigation only Fix from $1,9502025-11-07