CVE Vulnerability Catalog

A vulnerability in Windows File Explorer involves exposure of sensitive information to an unauthorized actor. An authorized attacker can exploit this flaw to disclose information locally.

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally. The vulnerability relates to an incorrect identity verification process.

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally. The vulnerability relates to incorrect checking of input data in the authentication mechanism.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage.

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

A vulnerability in Windows Boot Manager involves use of an uninitialized resource. An unauthorized attacker can bypass a security feature through a physical attack.

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability.

October CMS versions prior to 3.7.14 and 4.1.10 contain a stored XSS vulnerability in the Event Log mail preview. HTML content was rendered in an iframe without proper sandboxing, allowing JavaScript execution in the viewer's browser context.

October CMS versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting (XSS) vulnerability in the Backend Editor Settings. The Markup Classes fields (used for paragraph styles, inline styles, table styles, etc.) did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala editor dropdown menus, allowing JavaScript execution when any user opened a RichEditor. Exploitation could lead to privilege escalation if a superuser opens any RichEditor during routine content editing, and requires authenticated backend access with editor settings permissions.

An untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

GitHub Copilot and Visual Studio Code contain improper neutralization of special elements used in a command (command injection). An authorized attacker could exploit this to disclose information over a network.

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker convinces a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.

Improper neutralization of input during web page generation (cross-site scripting) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.

A type confusion vulnerability exists in Windows COM. An authorized attacker can disclose information locally.

Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.