Browse CVEs

HIGH 8.8 CVE-2025-21239 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21240 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21238 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21236 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21237 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21233 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21223 Windows Telephony Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2025-21186 Microsoft Access Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502025-01-14 HIGH 7.5 CVE-2025-21171 .NET Remote Code Execution Vulnerability .net 17.6.22 / 17.8.17+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability .net 17.6.22 / 17.8.17+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2025-21178 Visual Studio Remote Code Execution Vulnerability Visual Studio 2017 15.9.69 / 16.11.43+ Fix from $1,9502025-01-14 MEDIUM 5.5 CVE-2025-22134 When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no… Neovim after 9.1.1003 Fix from $1,6002025-01-13 MEDIUM 5.6 CVE-2024-56826 A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_de… Patch available Fix from $1,6002025-01-09 MEDIUM 5.6 CVE-2024-56827 A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_de… Patch available Fix from $1,6002025-01-09 HIGH 7.0 CVE-2024-51737 RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEA… Patch available Fix from $1,9502025-01-08 HIGH 7.0 CVE-2024-51480 RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MRE… Mitigation only Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-55627 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially cra… Suricata 7.0.8+ Fix from $1,9502025-01-06 HIGH 7.8 CVE-2024-13050 Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… Graphite Mitigation only Fix from $1,9502024-12-30 HIGH 7.8 CVE-2024-13051 Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… Graphite Mitigation only Fix from $1,9502024-12-30 HIGH 8.8 CVE-2024-56737 GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. Grub2 after 2.12 Fix from $1,9502024-12-29 HIGH 8.8 CVE-2024-56732 HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer funct… Harfbuzz after 10.0.1 Fix from $1,9502024-12-27 HIGH 7.5 CVE-2020-12819 A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 … Fortios 5.6.13 / 6.0.11+ Fix from $1,9502024-12-19 HIGH 7.8 CVE-2024-12669 A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor… Navisworks 2025.4+ Fix from $1,9502024-12-17 HIGH 7.8 CVE-2024-12670 A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor… Navisworks 2025.4+ Fix from $1,9502024-12-17 HIGH 7.8 CVE-2024-12179 A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor… Navisworks 2025.4+ Fix from $1,9502024-12-17 CRITICAL 9.8 CVE-2024-49775 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), … Mitigation only Fix from $2,3002024-12-16 MEDIUM 6.5 CVE-2024-8798 No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c. Zephyr after 3.7.0 Fix from $1,6002024-12-16 HIGH 7.8 CVE-2024-52059 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in R… Connext Professional 6.1.2.17 / 7.3.0.2+ Fix from $1,9502024-12-13 HIGH 7.8 CVE-2024-49138 KEVEPSS 25% Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20857 / 10.0.14393.7606+ Fix from $1,9502024-12-12 HIGH 8.8 CVE-2024-49125 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Server 2008 10.0.14393.7606 / 10.0.17763.6659+ Fix from $1,9502024-12-12