2025 CVEs (page 317)
Page 317 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-43561 | Critical | 9.1 | 2025-05-13 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution… |
CVE-2025-43560 | Critical | 9.1 | 2025-05-13 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi… |
CVE-2025-43559 | Critical | 9.1 | 2025-05-13 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi… |
CVE-2025-43554 | High | 7.8 | 2025-05-13 | Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2025-43553 | High | 7.8 | 2025-05-13 | Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code executi… |
CVE-2025-43551 | Medium | 5.5 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2025-43549 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-43548 | High | 7.8 | 2025-05-13 | Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2025-30316 | Medium | 5.4 | 2025-05-13 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to… |
CVE-2025-30315 | Medium | 6.1 | 2025-05-13 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicio… |
CVE-2025-30314 | Medium | 6.1 | 2025-05-13 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicio… |
CVE-2025-24495 | Medium | 5.6 | 2025-05-13 | Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enab… |
CVE-2025-24308 | High | 7.5 | 2025-05-13 | Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a privileged user to potentially enable escala… |
CVE-2025-23233 | Low | 3.5 | 2025-05-13 | Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially e… |
CVE-2025-22895 | Medium | 5.5 | 2025-05-13 | Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated use… |
CVE-2025-22892 | Medium | 6.5 | 2025-05-13 | Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an unauthenticated user to po… |
CVE-2025-22848 | Low | 3.5 | 2025-05-13 | Improper conditions check for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of… |
CVE-2025-22844 | Medium | 4.3 | 2025-05-13 | Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentially enable informati… |
CVE-2025-22843 | High | 7.8 | 2025-05-13 | Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially e… |
CVE-2025-22448 | Medium | 6.1 | 2025-05-13 | Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow an authenticated user to potentially enable… |
CVE-2025-22446 | Medium | 4.6 | 2025-05-13 | Inadequate encryption strength for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable esca… |
CVE-2025-21100 | Medium | 4.1 | 2025-05-13 | Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information dis… |
CVE-2025-21099 | Medium | 6.7 | 2025-05-13 | Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2025-21094 | High | 7.5 | 2025-05-13 | Improper input validation in the UEFI firmware DXE module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enable es… |
CVE-2025-21081 | Medium | 4.5 | 2025-05-13 | Protection mechanism failure for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escala… |
CVE-2025-20629 | Medium | 6.7 | 2025-05-13 | Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated… |
CVE-2025-20624 | Medium | 5.7 | 2025-05-13 | Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated use… |
CVE-2025-20623 | Medium | 5.6 | 2025-05-13 | Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (1… |
CVE-2025-20618 | High | 7.9 | 2025-05-13 | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable… |
CVE-2025-20616 | Medium | 5.5 | 2025-05-13 | Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable e… |
CVE-2025-20612 | Medium | 5.5 | 2025-05-13 | Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially e… |
CVE-2025-20611 | Medium | 4.7 | 2025-05-13 | Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated use… |
CVE-2025-20108 | Medium | 6.7 | 2025-05-13 | Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to pote… |
CVE-2025-20104 | High | 7.3 | 2025-05-13 | Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user to potentially enabl… |
CVE-2025-20103 | Medium | 6.5 | 2025-05-13 | Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of servic… |
CVE-2025-20101 | High | 8.4 | 2025-05-13 | Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via loc… |
CVE-2025-20100 | High | 7.5 | 2025-05-13 | Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6 processor with E-cores may allow a privileged user to potentially e… |
CVE-2025-20095 | Medium | 6.7 | 2025-05-13 | Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation… |
CVE-2025-20084 | Low | 3.5 | 2025-05-13 | Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable d… |
CVE-2025-20083 | High | 7.5 | 2025-05-13 | Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local ac… |
CVE-2025-20082 | High | 7.5 | 2025-05-13 | Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user t… |
CVE-2025-20079 | Medium | 6.7 | 2025-05-13 | Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2025-20076 | Medium | 5.0 | 2025-05-13 | Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentially enable escalatio… |
CVE-2025-20071 | Medium | 6.5 | 2025-05-13 | NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2025-20062 | Medium | 6.1 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20057 | Low | 3.5 | 2025-05-13 | Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable d… |
CVE-2025-20054 | Medium | 6.5 | 2025-05-13 | Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via lo… |
CVE-2025-20052 | High | 7.3 | 2025-05-13 | Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2025-20047 | Medium | 5.7 | 2025-05-13 | Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to pot… |
CVE-2025-20046 | High | 8.0 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20043 | Medium | 6.7 | 2025-05-13 | Uncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2025-20041 | Medium | 6.7 | 2025-05-13 | Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics before version 32.0.101.6325/32.0.101… |
CVE-2025-20039 | Medium | 6.6 | 2025-05-13 | Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20034 | Medium | 5.3 | 2025-05-13 | Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R01.02.0003… |
CVE-2025-20032 | High | 7.9 | 2025-05-13 | Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable d… |
CVE-2025-20031 | Medium | 6.5 | 2025-05-13 | Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2025-20030 | Low | 2.6 | 2025-05-13 | Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated use… |
CVE-2025-20026 | Medium | 6.1 | 2025-05-13 | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable de… |
CVE-2025-20022 | Medium | 5.7 | 2025-05-13 | Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to potentially enable in… |
CVE-2025-20018 | High | 8.4 | 2025-05-13 | Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2025-20015 | Medium | 6.7 | 2025-05-13 | Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escal… |
CVE-2025-20013 | Medium | 5.5 | 2025-05-13 | Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated use… |
CVE-2025-20012 | Medium | 4.9 | 2025-05-13 | Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical a… |
CVE-2025-20009 | Medium | 4.1 | 2025-05-13 | Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potential… |
CVE-2025-20008 | High | 7.7 | 2025-05-13 | Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow a privileged user to potentially enable esc… |
CVE-2025-20006 | High | 7.4 | 2025-05-13 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-20004 | High | 7.2 | 2025-05-13 | Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow a privileged user to… |
CVE-2025-20003 | High | 8.2 | 2025-05-13 | Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers may allow an authenticated user to potenti… |
CVE-2025-45863 | Critical | 9.8 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface. |
CVE-2025-45865 | Critical | 9.8 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface. |
CVE-2025-45861 | Critical | 9.8 | 2025-05-13 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface. |
CVE-2025-45746 | Medium | 6.5 | 2025-05-13 | In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Su… |
CVE-2025-3744 | High | 7.6 | 2025-05-13 | Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744… |
CVE-2025-4660 | Critical | 9.8 | 2025-05-13 | A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is acc… |
CVE-2025-43557 | High | 7.8 | 2025-05-13 | Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in… |
CVE-2025-43556 | High | 7.8 | 2025-05-13 | Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in t… |
CVE-2025-43555 | High | 7.8 | 2025-05-13 | Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execut… |
CVE-2025-43547 | High | 7.8 | 2025-05-13 | Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the… |
CVE-2025-43546 | High | 7.8 | 2025-05-13 | Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executio… |
CVE-2025-43545 | High | 7.8 | 2025-05-13 | Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in th… |
CVE-2025-30330 | High | 7.8 | 2025-05-13 | Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2025-30329 | Medium | 5.5 | 2025-05-13 | Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An atta… |
CVE-2025-30328 | High | 7.8 | 2025-05-13 | Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2025-30326 | High | 7.8 | 2025-05-13 | Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execu… |
CVE-2025-30325 | High | 7.8 | 2025-05-13 | Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execut… |
CVE-2025-30324 | High | 7.8 | 2025-05-13 | Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary cod… |
CVE-2025-30322 | High | 7.8 | 2025-05-13 | Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2025-27197 | High | 7.8 | 2025-05-13 | Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-4658 | Critical | 9.8 | 2025-05-13 | Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH… |
CVE-2025-47280 | Medium | 6.1 | 2025-05-13 | Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2… |
CVE-2025-3757 | Critical | 9.8 | 2025-05-13 | Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. |
CVE-2025-32709 | High | 7.8 | 2025-05-13 | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-32707 | High | 7.8 | 2025-05-13 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-32706 | High | 7.8 | 2025-05-13 | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-32705 | High | 7.8 | 2025-05-13 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. |
CVE-2025-32704 | High | 8.4 | 2025-05-13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-32703 | Medium | 5.5 | 2025-05-13 | Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. |
CVE-2025-32702 | High | 7.8 | 2025-05-13 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally. |
CVE-2025-32701 | High | 7.8 | 2025-05-13 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-30400 | High | 7.8 | 2025-05-13 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |