2025 CVEs (page 410)
Page 410 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-24438 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24437 | Medium | 5.4 | 2025-02-11 | Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could r… |
CVE-2025-24436 | Medium | 4.3 | 2025-02-11 | Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could r… |
CVE-2025-24435 | Medium | 4.3 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24434 | Critical | 9.1 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could r… |
CVE-2025-24432 | Low | 3.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition v… |
CVE-2025-24430 | Low | 3.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition v… |
CVE-2025-24429 | Low | 3.5 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24428 | Medium | 5.4 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24427 | Medium | 6.5 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24426 | Medium | 6.5 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24425 | Medium | 5.3 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business Logic Error vulnerability that could resul… |
CVE-2025-24424 | Medium | 6.5 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24423 | Medium | 4.3 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24422 | Medium | 6.5 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24421 | Medium | 4.3 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could r… |
CVE-2025-24420 | Medium | 4.3 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could r… |
CVE-2025-24419 | Medium | 4.3 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could r… |
CVE-2025-24418 | High | 8.1 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Authorization vulnerability that could re… |
CVE-2025-24417 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24416 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24415 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24414 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24413 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24412 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24411 | High | 8.1 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could r… |
CVE-2025-24410 | High | 8.7 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability tha… |
CVE-2025-24409 | High | 8.2 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could… |
CVE-2025-24408 | Medium | 6.5 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could resu… |
CVE-2025-24407 | High | 7.1 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could r… |
CVE-2025-24406 | High | 7.5 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted… |
CVE-2025-24042 | High | 7.3 | 2025-02-11 | Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability |
CVE-2025-24039 | High | 7.3 | 2025-02-11 | Visual Studio Code Elevation of Privilege Vulnerability |
CVE-2025-24036 | High | 7.0 | 2025-02-11 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability |
CVE-2025-21420 | High | 7.8 | 2025-02-11 | Windows Disk Cleanup Tool Elevation of Privilege Vulnerability |
CVE-2025-21419 | High | 7.1 | 2025-02-11 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
CVE-2025-21418 | High | 7.8 | 2025-02-11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2025-21414 | High | 7.0 | 2025-02-11 | Windows Core Messaging Elevation of Privileges Vulnerability |
CVE-2025-21410 | High | 8.8 | 2025-02-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2025-21407 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21406 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21400 | High | 8.0 | 2025-02-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2025-21397 | High | 7.8 | 2025-02-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2025-21394 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21392 | High | 7.8 | 2025-02-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2025-21391 | High | 7.1 | 2025-02-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2025-21390 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21387 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21386 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21383 | High | 7.8 | 2025-02-11 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2025-21381 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21379 | High | 7.1 | 2025-02-11 | DHCP Client Service Remote Code Execution Vulnerability |
CVE-2025-21377 | Medium | 6.5 | 2025-02-11 | NTLM Hash Disclosure Spoofing Vulnerability |
CVE-2025-21376 | High | 8.1 | 2025-02-11 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2025-21375 | High | 7.8 | 2025-02-11 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2025-21373 | High | 7.8 | 2025-02-11 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2025-21371 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21369 | High | 8.8 | 2025-02-11 | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CVE-2025-21368 | High | 8.8 | 2025-02-11 | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CVE-2025-21367 | High | 7.8 | 2025-02-11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2025-21359 | High | 7.8 | 2025-02-11 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2025-21358 | High | 7.8 | 2025-02-11 | Windows Core Messaging Elevation of Privileges Vulnerability |
CVE-2025-21352 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21351 | High | 7.5 | 2025-02-11 | Windows Active Directory Domain Services API Denial of Service Vulnerability |
CVE-2025-21350 | Medium | 5.9 | 2025-02-11 | Windows Kerberos Denial of Service Vulnerability |
CVE-2025-21349 | Medium | 6.8 | 2025-02-11 | Windows Remote Desktop Configuration Service Tampering Vulnerability |
CVE-2025-21347 | Medium | 6.0 | 2025-02-11 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2025-21337 | Low | 3.3 | 2025-02-11 | Windows NTFS Elevation of Privilege Vulnerability |
CVE-2025-21322 | High | 7.8 | 2025-02-11 | Microsoft PC Manager Elevation of Privilege Vulnerability |
CVE-2025-21259 | Medium | 5.3 | 2025-02-11 | Microsoft Outlook Spoofing Vulnerability |
CVE-2025-21254 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21216 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21212 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21208 | High | 8.8 | 2025-02-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2025-21206 | High | 7.3 | 2025-02-11 | Visual Studio Installer Elevation of Privilege Vulnerability |
CVE-2025-21201 | High | 8.8 | 2025-02-11 | Windows Telephony Server Remote Code Execution Vulnerability |
CVE-2025-21200 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21198 | Critical | 9.0 | 2025-02-11 | Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability |
CVE-2025-21194 | High | 7.1 | 2025-02-11 | Microsoft Surface Security Feature Bypass Vulnerability |
CVE-2025-21190 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21188 | Medium | 6.0 | 2025-02-11 | Azure Network Watcher VM Extension Elevation of Privilege Vulnerability |
CVE-2025-21184 | High | 7.0 | 2025-02-11 | Windows Core Messaging Elevation of Privileges Vulnerability |
CVE-2025-21183 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-21182 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-21181 | High | 7.5 | 2025-02-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21179 | Medium | 4.8 | 2025-02-11 | DHCP Client Service Denial of Service Vulnerability |
CVE-2025-21163 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2025-21162 | Medium | 5.5 | 2025-02-11 | Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could re… |
CVE-2025-21161 | High | 7.8 | 2025-02-11 | Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
CVE-2025-21160 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execu… |
CVE-2025-21159 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2025-21156 | High | 7.8 | 2025-02-11 | InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution… |
CVE-2025-21155 | Medium | 5.5 | 2025-02-11 | Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service… |
CVE-2025-24472 | High | 8.1 | 2025-02-11 | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12… |
CVE-2025-24470 | High | 8.6 | 2025-02-11 | An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a rem… |
CVE-2025-22399 | High | 7.9 | 2025-02-11 | Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially… |
CVE-2025-21158 | High | 7.8 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary c… |
CVE-2025-21157 | High | 7.8 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2025-21126 | Medium | 5.5 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of… |
CVE-2025-21125 | Medium | 5.5 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s… |