Browse CVEs

HIGH 7.8 CVE-2025-59255 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59242 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-59191 Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.7919 / 10.0.19044.6456+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-58722 Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8519 / 10.0.17763.7919+ Fix from $1,9502025-10-14 HIGH 7.0 CVE-2025-58725 Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.21161 / 10.0.14393.8519+ Fix from $1,9502025-10-14 HIGH 7.8 CVE-2025-55697 Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally. Windows Server 2022 23h2 10.0.25398.1913 / 10.0.26100.6899+ Fix from $1,9502025-10-14 HIGH 8.8 CVE-2025-57740 An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all … Fortiproxy 1.4.3 / 7.2.11+ Fix from $1,9502025-10-14 HIGH 7.2 CVE-2025-22258 A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 … Fortios 1.4.3 / 7.0.17+ Fix from $1,9502025-10-14 HIGH 7.2 CVE-2024-50571 A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 thro… Fortianalyzer 6.4.16 / 7.0.14+ Fix from $1,9502025-10-14 HIGH 8.8 CVE-2025-20720 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation… Software Development Kit after 7.6.7.2 Fix from $1,9502025-10-14 HIGH 8.8 CVE-2025-20712 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation… Software Development Kit after 8.3.1.1 Fix from $1,9502025-10-14 MEDIUM 5.5 CVE-2025-11495 A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of t… Binutils Patch available Fix from $1,6002025-10-08 HIGH 7.5 CVE-2025-43912 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version… Data Domain Operating System 7.10.1.70 / 7.13.1.40+ Fix from $1,9502025-10-07 HIGH 7.8 CVE-2025-11277 A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/co… Assimp No fix yet Fix from $1,9502025-10-05 HIGH 7.8 CVE-2025-11275 A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator… Assimp No fix yet Fix from $1,9502025-10-05 MEDIUM 6.1 CVE-2025-10504 Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. Mitigation only Fix from $1,6002025-09-29 HIGH 7.8 CVE-2025-11083 A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component… Binutils Patch available Fix from $1,9502025-09-27 HIGH 7.8 CVE-2025-11082 A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. … Binutils Patch available Fix from $1,9502025-09-27 MEDIUM 6.5 CVE-2025-59938 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh… Wazuh 4.11.0+ Fix from $1,6002025-09-27 HIGH 7.8 CVE-2025-11014 A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/S… Ogre after 14.4.1 Fix from $1,9502025-09-26 MEDIUM 5.3 CVE-2025-11010 A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_include_common of the file /src/ucl… No fix yet Fix from $1,6002025-09-26 HIGH 7.8 CVE-2025-10996 A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesfo… Open Babel after 3.1.1 Fix from $1,9502025-09-26 HIGH 7.8 CVE-2025-10997 A flaw has been found in Open Babel up to 3.1.1. Impacted is the function ChemKinFormat::CheckSpecies of the file /src/formats/chemkinformat.cpp. Exe… Open Babel after 3.1.1 Fix from $1,9502025-09-26 CRITICAL 9.0 CVE-2025-20363EPSS 8% A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) S… Ios Xr 7.0.8 / 7.2.10+ Fix from $2,3002025-09-25 HIGH 8.8 CVE-2025-10502 Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious… Chrome 140.0.7339.185+ Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-23308 NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the us… Cuda Toolkit 13.0.0+ Fix from $1,9502025-09-24 HIGH 7.5 CVE-2025-57637 Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the viav4 parameter allowing attacker… Di 7100g Firmware No fix yet Fix from $1,9502025-09-23 HIGH 7.5 CVE-2025-57638 Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value. Ac9 Firmware No fix yet Fix from $1,9502025-09-23 HIGH 7.5 CVE-2025-51005 A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program inc… Tcpreplay No fix yet Fix from $1,9502025-09-23 HIGH 7.5 CVE-2025-56394 Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow. Free5gc Patch available Fix from $1,9502025-09-23