CVE Vulnerability Catalog

Intel(R) CIP software before WIN_DCA_2.4.0.11001 allows unrestricted upload of dangerous file types in Ring 3 (user applications). This may enable privilege escalation by an unprivileged user with privileged access in a complex attack. Integrity impact is low; confidentiality and availability are not affected.

Improper access control in some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3 may allow information disclosure. An unprivileged software adversary combined with a privileged user and a high-complexity attack may enable data exposure.

Improper privilege management in Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3 (User Applications) may allow an escalation of privilege. An unprivileged authenticated adversary with a high-complexity attack and network access may enable data manipulation.

Sensitive information is not cleared in a resource before reuse in some Intel(R) NPU Drivers for Windows before version 32.0.100.4023 within Ring 3 (user applications), potentially allowing information disclosure. An unprivileged authenticated user with local access could exploit this.

In JetBrains YouTrack before version 2025.3.104432, a race condition allows bypassing the helpdesk Agent limit. The vulnerability enables unauthorized exceeding of the allowed number of agents.

A spoofing vulnerability was detected in the Firefox browser. The vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.

A vulnerability allows uploading files with a specific name to a temporary directory, potentially causing process crashes and impacting usability. The flaw can only be exploited after authenticating with an operator- or administrator-privileged service account.

Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an administrative user uploads files to the application server. This could allow uploading a malicious file into the system, with low impact on application integrity.

In liweiyi ChestnutCMS up to 1.5.8, the resourceDownload function in /dev-api/common/download is vulnerable to path traversal via manipulation of the path argument. The attack can be launched remotely, and the exploit is publicly available.

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. Manipulation of the argument Title causes cross-site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early but did not respond.

In EverShop up to 2.0.1, manipulation of the uuid argument in Order.resolvers.js of the Order Handler component results in improper control of resource identifiers. The attack can be performed remotely, is of high complexity and difficult exploitability, and the exploit is public.

A security flaw has been discovered in Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Manipulation of the argument invoice_id results in improper control of resource identifiers. Remote exploitation is possible, but the attack is considered high complexity and difficult to exploit. The exploit has been released publicly and may be exploited.

In newbee-mall-plus up to 2.4.1, the executeSeckill function at /seckillExecution/ mishandles the userid argument, leading to authorization bypass. The attack can be initiated remotely, is considered high complexity and difficult to exploit, and the exploit is publicly available.

Vercel's AI SDK has a vulnerability that allows bypassing filetype whitelists when uploading files. The issue is fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta.

Use-after-free vulnerability in V8 in Google Chrome prior to 141.0.7390.54. A remote attacker can potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low)

Samsung Email prior to version 6.2.06.0 has improper input validation. It allows local attackers to launch arbitrary activities with Samsung Email privileges.

A permissions issue was addressed with additional restrictions. The vulnerability affects iOS 18.7.2 and iPadOS 18.7.2, and iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed.

A logging issue was addressed with improved data redaction. The vulnerability affects iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, and visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging.

A vulnerability in macOS allows an attacker with physical access to access contacts from the lock screen. The issue was addressed by restricting options offered on a locked device. It is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1.

This issue was addressed with improved handling of symlinks and is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access protected user data.