Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-09-23 | 2026-10-07 |
|---|---|---|
| ≥90 % | 491 | 344 |
| ≥50 % | 1475 | 1071 |
| ≥10 % | 0 | 3 |
| <10 % | 0 | 549 |
CVE-2025-62555 | Microsoft Word use after free (EUVD-2025-202217 / Nessus ID 277993)
A vulnerability classified as problematic has been found in Microsoft Word. Affected is an unknown function. The manipulation leads to use after free. This vulnerability is documented as CVE-2025-62555. The attack can be initiated remotely.
CVE-2025-62554 | Microsoft Office type confusion (EUVD-2025-202218 / Nessus ID 278333)
A vulnerability described as critical has been identified in Microsoft Office. This impacts an unknown function. Executing a manipulation can lead to type confusion. This vulnerability is registered as CVE-2025-62554. It is possible to laun
CVE-2025-62552 | Microsoft Access path traversal (EUVD-2025-202220 / Nessus ID 278334)
A vulnerability labeled as critical has been found in Microsoft Access. The impacted element is an unknown function. Such manipulation leads to relative path traversal. This vulnerability is listed as CVE-2025-62552. The attack may be perfo
CVE-2025-62549 | Microsoft Windows up to Server 2025 RRAS untrusted pointer dereference (Nessus ID 278000)
A vulnerability categorized as critical has been discovered in Microsoft Windows. Impacted is an unknown function of the component RRAS. The manipulation results in untrusted pointer dereference. This vulnerability is identified as CVE-2025
CVE-2025-43532 | Apple macOS up to 14.8.2/15.7.2 App memory corruption (EUVD-2025-203155 / WID-SEC-2025-2838)
A vulnerability classified as critical was found in Apple macOS up to 14.8.2/15.7.2. Affected by this vulnerability is an unknown functionality of the component App. The manipulation results in memory corruption. This vulnerability is ident
CVE-2025-43494 | Apple macOS/visionOS/watchOS/iOS/iPadOS up to 26.0 denial of service (EUVD-2025-203160)
A vulnerability classified as problematic was found in Apple macOS, visionOS, watchOS, iOS and iPadOS up to 26.0. This affects an unknown function. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE
CVE-2025-14523 | libsoup HTTP Header Host request smuggling (EUVD-2025-202685 / Nessus ID 278353)
A vulnerability classified as critical has been found in libsoup. This affects an unknown part of the component HTTP Header Handler. This manipulation of the argument Host causes http request smuggling. This vulnerability is tracked as CVE-
CVE-2026-106418 | Google Chrome up to 154.0.8037.97 Network improper authorization (Nessus ID 363723)
A vulnerability, which was classified as critical, has been found in Google Chrome. This vulnerability affects unknown code of the component Network. This manipulation causes improper authorization. This vulnerability is registered as CVE-2
CVE-2026-106307 | Google Chrome up to 154.0.8037.97 Network access control (Nessus ID 363724)
A vulnerability has been found in Google Chrome and classified as critical. This vulnerability affects unknown code of the component Network. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-1
CVE-2026-106373 | Google Chrome up to 154.0.8037.97 Fonts use after free (Nessus ID 363726)
A vulnerability, which was classified as critical, was found in Google Chrome. This vulnerability affects unknown code of the component Fonts. The manipulation results in use after free. This vulnerability is known as CVE-2026-106373. It is
CVE-2025-62474 | Microsoft Windows up to Server 2025 Remote Access Connection Manager access control (EUVD-2025-202222)
A vulnerability was found in Microsoft Windows. It has been rated as critical. This issue affects some unknown processing of the component Remote Access Connection Manager. The manipulation leads to improper access controls. This vulnerabil
CVE-2025-62470 | Microsoft Windows up to Server 2025 Common Log File System Driver heap-based overflow (Nessus ID 278000)
A vulnerability was found in Microsoft Windows and classified as critical. Affected by this issue is some unknown functionality of the component Common Log File System Driver. Such manipulation leads to heap-based buffer overflow. This vuln
CVE-2025-62468 | Microsoft Windows up to Server 2025 Defender Firewall Service out-of-bounds (EUVD-2025-202223)
A vulnerability, which was classified as problematic, was found in Microsoft Windows 11 23H2/11 24H2/11 25H2/Server 2022 23H2/Server 2025. Affected is an unknown function of the component Defender Firewall Service. The manipulation results
CVE-2025-62466 | Microsoft Windows up to Server 2025 Client-Side Caching null pointer dereference (Nessus ID 278000)
A vulnerability classified as critical was found in Microsoft Windows. This affects an unknown function of the component Client-Side Caching. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2
CVE-2024-26507 | FinalWire AIDA64 Extreme up to 7.00.6700 MmMapIoSpace improper validation of syntactic correctness of input
A vulnerability marked as problematic has been reported in FinalWire AIDA64 Extreme, AIDA64 Engineer, AIDA64 Business and AIDA64 Network Audit up to 7.00.6700. This vulnerability affects unknown code of the component MmMapIoSpace/IoAllocate
CVE-2026-46569 | Tuxera ntfs-3g 2021.8.22/2022.10.3/2026.2.25 NTFS Image libntfs-3g/index.c ntfs_ib_copy_tail heap-based overflow (EUVD-2026-94354)
A vulnerability classified as very critical was found in Tuxera ntfs-3g 2021.8.22/2022.10.3/2026.2.25. Impacted is the function ntfs_ib_copy_tail of the file libntfs-3g/index.c of the component NTFS Image Handler. The manipulation results i
CVE-2026-42617 | Tuxera ntfs-3g 2021.8.22/2022.10.3/2026.2.25 NTFS image index.c ntfs_ir_to_ib heap-based overflow (EUVD-2026-94355)
A vulnerability marked as very critical has been reported in Tuxera ntfs-3g 2021.8.22/2022.10.3/2026.2.25. This affects the function ntfs_ir_to_ib of the file index.c of the component NTFS image Handler. Performing a manipulation results in
CVE-2025-45871 | LogicalDOC Enterprise up to 9.1.1 WorkflowsDataServlet sql injection (EUVD-2025-211038)
A vulnerability described as critical has been identified in LogicalDOC Enterprise up to 9.1.1. Affected by this vulnerability is an unknown functionality of the component WorkflowsDataServlet. Executing a manipulation can lead to sql injec
CVE-2026-104944 | TP-Link Tapo C500 up to 2.0 TDP Daemon memory corruption (EUVD-2026-93792)
A vulnerability was found in TP-Link Tapo C500 up to 2.0. It has been rated as critical. The impacted element is an unknown function of the component TDP Daemon. This manipulation causes memory corruption. This vulnerability is handled as C
CVE-2026-46571 | Tuxera ntfs-3g 2021.8.22/2022.10.3/2026.2.25 Reparse libntfs-3g/reparse.c ntfs_fix_file_name out-of-bounds (EUVD-2026-94353)
A vulnerability was found in Tuxera ntfs-3g 2021.8.22/2022.10.3/2026.2.25 and classified as problematic. This impacts the function ntfs_fix_file_name of the file libntfs-3g/reparse.c of the component Reparse. Executing a manipulation can le
CVE-2022-45722 | ezEIP 5.3.0 cross site scripting (EUVD-2022-48581)
A vulnerability categorized as problematic has been discovered in ezEIP 5.3.0. This affects an unknown function. Executing a manipulation can lead to cross site scripting. This vulnerability appears as CVE-2022-45722. The attack may be perf
CVE-2022-45697 | Razer Central prior 7.8.0.381 denial of service (EUVD-2022-48556)
A vulnerability, which was classified as problematic, was found in Razer Central. This impacts an unknown function. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2022-45697. The attack requires being
CVE-2022-45677 | tanujpatra228 Tution Management System Parameter student_login.process.php email sql injection (EUVD-2022-48541)
A vulnerability labeled as critical has been found in tanujpatra228 Tution Management System. Affected by this issue is some unknown functionality of the file processes/student_login.process.php of the component Parameter Handler. The manip
CVE-2022-45674 | Tenda AC6 15.03.05.19 fromSysToolReboot cross-site request forgery (EUVD-2022-48538)
A vulnerability classified as problematic was found in Tenda AC6 15.03.05.19. This impacts the function fromSysToolReboot. Such manipulation leads to cross-site request forgery. This vulnerability is listed as CVE-2022-45674. The attack may
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
On October 5th, Atlassian published patches for multiple products to fix an "Arbitrary File Access" vulnerability [CVE-2026-21589]. An attacker can read arbitrary files in the web application's directory, potentially exposing
CVE-2026-58068 | Veeam Agent up to 13.0 privileges management (EUVD-2026-94226)
A vulnerability was found in Veeam Agent up to 13.0. It has been classified as problematic. The affected element is an unknown function. This manipulation causes improper privilege management. This vulnerability is tracked as CVE-2026-58068
CVE-2025-64391 | Veeam Windows up to 13.0 privileges management (EUVD-2025-211041)
A vulnerability was found in Veeam Windows up to 13.0 and classified as problematic. Impacted is an unknown function. The manipulation results in improper privilege management. This vulnerability is identified as CVE-2025-64391. The attack
CVE-2025-64392 | Veeam Backup Enterprise Manager prior 12.3.2.4934 cross site scripting (EUVD-2025-211040)
A vulnerability was found in Veeam Backup Enterprise Manager. It has been rated as problematic. This affects an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-64392.
CVE-2025-64393 | Veeam Backup and Replication up to 12.3.2 code injection (EUVD-2025-211039)
A vulnerability categorized as very critical has been discovered in Veeam Backup and Replication up to 12.3.2. This impacts an unknown function. Executing a manipulation can lead to code injection. This vulnerability is registered as CVE-20
Atlassian-CVE-2026-21589: Ausnutzung startet schon nach 2 Stunden
LONDON (IT BOLTWISE) – Nach der öffentlichen Offenlegung einer kritischen Schwachstelle in Atlassian Data Center beginnen Angriffsversuche bereits innerhalb von zwei Stunden. Die Lücke (CVE-2026-21589, CVSS 9,3) erlaubt – unter Bedingungen
CVE-2026-106299 | Google Chrome up to 154.0.8037.97 WebAudio access control (Nessus ID 363729)
A vulnerability classified as critical has been found in Google Chrome. Affected is an unknown function of the component WebAudio. This manipulation causes improper access controls. This vulnerability is handled as CVE-2026-106299. The atta
CVE-2026-106263 | Google Chrome up to 154.0.8037.97 SignIn access control (Nessus ID 363728)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown function of the component SignIn. This manipulation causes improper access controls. This vulnerability is handled as CVE-2026-106263. The at
CVE-2026-106408 | Google Chrome up to 154.0.8037.97 Mobile protection mechanism (Nessus ID 363730)
A vulnerability has been found in Google Chrome and classified as critical. This affects an unknown part of the component Mobile. This manipulation causes protection mechanism failure. This vulnerability appears as CVE-2026-106408. The atta
CVE-2026-106278 | Google Chrome up to 154.0.8037.97 Select use after free (Nessus ID 363731)
A vulnerability was found in Google Chrome and classified as critical. This impacts an unknown function of the component Select. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-106278. The attack may be p
CVE-2026-106395 | Google Chrome up to 154.0.8037.97 Dawn uninitialized resource (Nessus ID 363733)
A vulnerability labeled as problematic has been found in Google Chrome. This vulnerability affects unknown code of the component Dawn. The manipulation results in uninitialized resource. This vulnerability was named CVE-2026-106395. The att
CVE-2026-106296 | Google Chrome up to 154.0.8037.97 UI access control (Nessus ID 363732)
A vulnerability labeled as critical has been found in Google Chrome. The impacted element is an unknown function of the component UI. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2026-1062
Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw,
CVE-2026-76483 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76483 are related to issues with insufficiently protec
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security re
CVE-2026-76482 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security re
CVE-2026-76458 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76458 are related to improper handling of exceptional conditions issues that are grouped under the Common Weakness Enumeration (CWE) C
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mu
CVE-2026-76471 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploi
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vu
CVE-2026-76455 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76455 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mu
CVE-2026-76457 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76457 are related to out-of-bounds read issues that are grouped under the Common Weakness Enumeration (CWE) CWE-125.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mu
CVE-2026-76456 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76456 are related to improper input validation of special elements used in a command issue that are grouped under the Common Weakness
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mu
CVE-2026-76465 | A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request p
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execut
CVE-2026-101886 | Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized display name from a ContentProvider used in file path construction. Attackers can craft a shared content:// URI with a display name containing '../' sequences to place
Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the e
CVE-2026-62252 | Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no first-login forced-change mechanism. Any attacker who reaches the login endpoint immediately gains full administrative access. Version 11.0.283 patches the issue.
Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (st
CVE-2026-76453 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76453 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mu
CVE-2026-76437 | A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of user-supplied content within configurations that are submitted to the web-based management interface. An attacker could exploit this vulnerability by updating co
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating s
CVE-2026-76452 | A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful expl
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected
CVE-2026-20362 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain limited sensitive
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to imprope
CVE-2026-20173 | A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instabilit
A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to s
CVE-2026-20321 | A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient input validation of user-controlled command arguments. An attacker could exploit this vulnerability by authenticating using th
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the a
CVE-2026-20038 | A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploit this vulnerability by sending IPv4 or IPv6 packets using UDP source and destination ports that are assigned to DHCP traffic through an affected device. A
A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an
CVE-2026-20032 | A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by manipulating specific functions within the Python interpreter. A successful exploit
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected&n
CVE-2026-62253 | Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret == ""`. The JWT secret defaults to an empty string. On a default installation, all protected API endpoints under `/api/v1`, `/api/v3`, and `/api/v4` are completely unauthenticated. Version 11.0.283 patches the issue.
Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret == ""`. The JWT secret defaults to an empty s
CVE-2026-62251 | Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of the codebase. Any authenticated user can execute arbitrary SQL statements against all data accessible through the FlightSQL service. Version 11.0.283 patches the issue.
Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used thr
CVE-2025-62458 | Microsoft Windows up to Server 2022 Win32k heap-based overflow (EUVD-2025-202252 / Nessus ID 277997)
A vulnerability categorized as critical has been discovered in Microsoft Windows. This affects an unknown part of the component Win32k. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is tracked as CVE-20
CVE-2025-62457 | Microsoft Windows up to Server 2025 Cloud Files Mini Filter Driver out-of-bounds (Nessus ID 277996)
A vulnerability was found in Microsoft Windows. It has been rated as critical. Affected by this issue is some unknown functionality of the component Cloud Files Mini Filter Driver. Performing a manipulation results in out-of-bounds read. Th
CVE-2025-62456 | Microsoft Windows up to Server 2025 Resilient File System heap-based overflow (Nessus ID 277996)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Resilient File System. Such manipulation leads to heap-based buf