Krm1/CVE-2025 huggingface dataset:
CVE-2025-21223 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21224 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 8.1 (HIGH)
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVE-2025-21225 (CWE-843, NVD-CWE-noinfo)
CVSS 3.1 score: 5.9 (MEDIUM)
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVE-2025-21226 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21227 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21228 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21229 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21230 (CWE-20, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21231 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
IP Helper Denial of Service Vulnerability
CVE-2025-21232 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21233 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21234 (CWE-20, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-21235 (CWE-20, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2025-21236 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21237 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21238 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21239 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21240 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21241 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21242 (CWE-200, NVD-CWE-noinfo)
CVSS 3.1 score: 5.9 (MEDIUM)
Windows Kerberos Information Disclosure Vulnerability
CVE-2025-21243 (CWE-190, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21244 (CWE-190, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21245 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21246 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21248 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21249 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21250 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21251 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21252 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21255 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21256 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21257 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
CVE-2025-21258 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21260 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21261 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21263 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21265 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21266 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21268 (CWE-41, NVD-CWE-noinfo)
CVSS 3.1 score: 4.3 (MEDIUM)
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21269 (CWE-41, NVD-CWE-noinfo)
CVSS 3.1 score: 4.3 (MEDIUM)
Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2025-21270 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21271 (CWE-126, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2025-21272 (CWE-908, NVD-CWE-noinfo)
CVSS 3.1 score: 6.5 (MEDIUM)
Windows COM Server Information Disclosure Vulnerability
CVE-2025-21273 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21274 (CWE-59, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Event Tracing Denial of Service Vulnerability
CVE-2025-21275 (CWE-285, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2025-21276 (CWE-191, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Windows MapUrlToZone Denial of Service Vulnerability
CVE-2025-21277 (CWE-126, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21278 (CWE-362, NVD-CWE-noinfo)
CVSS 3.1 score: 6.2 (MEDIUM)
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVE-2025-21280 (CWE-20, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
CVE-2025-21281 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft COM for Windows Elevation of Privilege Vulnerability
CVE-2025-21282 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21284 (CWE-20, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
CVE-2025-21285 (CWE-476, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21286 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21287 (CWE-269, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows Installer Elevation of Privilege Vulnerability
CVE-2025-21288 (CWE-908, NVD-CWE-noinfo)
CVSS 3.1 score: 6.5 (MEDIUM)
Windows COM Server Information Disclosure Vulnerability
CVE-2025-21289 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21290 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21291 (CWE-415, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Direct Show Remote Code Execution Vulnerability
CVE-2025-21292 (CWE-94, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Search Service Elevation of Privilege Vulnerability
CVE-2025-21293 (CWE-284, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2025-21294 (CWE-591, NVD-CWE-noinfo)
CVSS 3.1 score: 8.1 (HIGH)
Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-21295 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 8.1 (HIGH)
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
CVE-2025-21296 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
BranchCache Remote Code Execution Vulnerability
CVE-2025-21297 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 8.1 (HIGH)
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21298 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 9.8 (CRITICAL)
Windows OLE Remote Code Execution Vulnerability
CVE-2025-21299 (CWE-922, NVD-CWE-noinfo)
CVSS 3.1 score: 7.1 (HIGH)
Windows Kerberos Security Feature Bypass Vulnerability
CVE-2025-21300 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Windows upnphost.dll Denial of Service Vulnerability
CVE-2025-21301 (CWE-284, NVD-CWE-noinfo)
CVSS 3.1 score: 6.5 (MEDIUM)
Windows Geolocation Service Information Disclosure Vulnerability
CVE-2025-21302 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21303 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21304 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2025-21305 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21306 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21307 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 9.8 (CRITICAL)
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2025-21308 (CWE-200, NVD-CWE-noinfo)
CVSS 3.1 score: 6.5 (MEDIUM)
Windows Themes Spoofing Vulnerability
CVE-2025-21309 (CWE-591, NVD-CWE-noinfo)
CVSS 3.1 score: 8.1 (HIGH)
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21310 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21311 (CWE-303, NVD-CWE-noinfo)
CVSS 3.1 score: 9.8 (CRITICAL)
Windows NTLM V1 Elevation of Privilege Vulnerability
CVE-2025-21312 (CWE-908, NVD-CWE-noinfo)
CVSS 3.1 score: 2.4 (LOW)
Windows Smart Card Reader Information Disclosure Vulnerability
CVE-2025-21313 (CWE-833, NVD-CWE-noinfo)
CVSS 3.1 score: 6.5 (MEDIUM)
Windows Security Account Manager (SAM) Denial of Service Vulnerability
CVE-2025-21314 (CWE-451, NVD-CWE-noinfo)
CVSS 3.1 score: 6.5 (MEDIUM)
Windows SmartScreen Spoofing Vulnerability
CVE-2025-21315 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-21316 (CWE-532, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21317 (CWE-532, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21318 (CWE-532, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21319 (CWE-532, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21320 (CWE-532, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21321 (CWE-532, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21323 (CWE-532, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21324 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21326 (CWE-843, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Internet Explorer Remote Code Execution Vulnerability
CVE-2025-21327 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21328 (CWE-41, NVD-CWE-noinfo)
CVSS 3.1 score: 4.3 (MEDIUM)
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21329 (CWE-41, NVD-CWE-noinfo)
CVSS 3.1 score: 4.3 (MEDIUM)
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21330 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Windows Remote Desktop Services Denial of Service Vulnerability
CVE-2025-21331 (CWE-59, NVD-CWE-noinfo)
CVSS 3.1 score: 7.3 (HIGH)
Windows Installer Elevation of Privilege Vulnerability
CVE-2025-21332 (CWE-41, NVD-CWE-noinfo)
CVSS 3.1 score: 4.3 (MEDIUM)
MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21333 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334 (CWE-416)
CVSS 3.1 score: 7.8 (HIGH)
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21335 (CWE-416)
CVSS 3.1 score: 7.8 (HIGH)
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21336 (NVD-CWE-noinfo)
CVSS 3.1 score: 5.6 (MEDIUM)
Windows Cryptographic Information Disclosure Vulnerability
CVE-2025-21338 (CWE-190, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
GDI+ Remote Code Execution Vulnerability
CVE-2025-21339 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21340 (CWE-284, NVD-CWE-noinfo)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
CVE-2025-21341 (CWE-125, NVD-CWE-noinfo)
CVSS 3.1 score: 6.6 (MEDIUM)
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21343 (CWE-269, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Windows Web Threat Defense User Service Information Disclosure Vulnerability
CVE-2025-21344 (CWE-20, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21345 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2025-21346 (CWE-693, NVD-CWE-noinfo)
CVSS 3.1 score: 7.1 (HIGH)
Microsoft Office Security Feature Bypass Vulnerability
CVE-2025-21348 (CWE-285, NVD-CWE-noinfo)
CVSS 3.1 score: 7.2 (HIGH)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21354 (CWE-822, NVD-CWE-noinfo)
CVSS 3.1 score: 8.4 (HIGH)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21356 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2025-21357 (CWE-908, NVD-CWE-noinfo)
CVSS 3.1 score: 6.7 (MEDIUM)
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-21360 (CWE-269, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
CVE-2025-21361 (CWE-641, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-21362 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 8.4 (HIGH)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21363 (CWE-822, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-21364 (CWE-502, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2025-21365 (CWE-426, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21366 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21370 (CWE-20, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2025-21372 (CWE-416, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-21374 (CWE-125, CWE-125)
CVSS 3.1 score: 5.5 (MEDIUM)
Windows CSC Service Information Disclosure Vulnerability
CVE-2025-21378 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2025-21382 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2025-21389 (CWE-400, NVD-CWE-noinfo)
CVSS 3.1 score: 7.5 (HIGH)
Windows upnphost.dll Denial of Service Vulnerability
CVE-2025-21393 (CWE-79, NVD-CWE-noinfo)
CVSS 3.1 score: 6.3 (MEDIUM)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2025-21395 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21402 (CWE-641, NVD-CWE-noinfo)
CVSS 3.1 score: 7.8 (HIGH)
Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2025-21403 (CWE-863, NVD-CWE-noinfo)
CVSS 3.1 score: 6.4 (MEDIUM)
On-Premises Data Gateway Information Disclosure Vulnerability
CVE-2025-21405 (CWE-284, NVD-CWE-noinfo)
CVSS 3.1 score: 7.3 (HIGH)
Visual Studio Elevation of Privilege Vulnerability
CVE-2025-21409 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21411 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21413 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21417 (CWE-122, NVD-CWE-noinfo)
CVSS 3.1 score: 8.8 (HIGH)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21607 (CWE-670)
CVSS 4.0 score: 2.3 (LOW)
Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover (0x1) and Identity (0x4), the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall execution continue. Then the execution result can be incorrect. Based on EVM's rules, after the failed precompile the remaining code has only 1/64 of the pre-call-gas left (as 63/64 were forwarded and spent). Hence, only fairly simple executions can follow the failed precompile calls. Therefore, we found no significantly impacted real-world contracts. None the less an advisory has been made out of an abundance of caution. There are no actions for users to take.
CVE-2025-23025 (CWE-862)
CVSS 3.1 score: 9.0 (CRITICAL)
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. NOTE: The Realtime WYSIWYG Editor extension was **experimental**, and thus **not recommended**, in the versions affected by this vulnerability. It has become enabled by default, and thus recommended, starting with XWiki 16.9.0. A user with only **edit right** can join a realtime editing session where others, that where already there or that may join later, have **script** or **programming** access rights. This user can then insert **script rendering macros** that are executed for those users in the realtime session that have script or programming rights. The inserted scripts can be used to gain more access rights. This vulnerability has been patched in XWiki 15.10.2, 16.4.1 and 16.6.0-rc-1. Users are advised to upgrade. Users unable to upgrade may either disable the realtime WYSIWYG editing by disabling the ``xwiki-realtime`` CKEditor plugin from the WYSIWYG editor administration section or uninstall the Realtime WYSIWYG Editorextension (org.xwiki.platform:xwiki-platform-realtime-wysiwyg-ui).
CVE-2025-23051 (CWE-94)
CVSS 3.1 score: 7.2 (HIGH)
An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated user to leverage parameter injection to overwrite arbitrary system files.
CVE-2025-23052 (CWE-77)
CVSS 3.1 score: 7.2 (HIGH)
Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2025-23366 (CWE-79)
CVSS 3.1 score: 6.5 (MEDIUM)
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.
CVE-2025-0474 (CWE-918)
CVSS 3.1 score: 7.7 (HIGH)
Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the application user.
This issue affects Invoice Ninja: from 5.8.56 through 5.11.23.
CVE-2025-21122 (CWE-191)
CVSS 3.1 score: 7.8 (HIGH)
Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21127 (CWE-427)
CVSS 3.1 score: 7.8 (HIGH)
Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of arbitrary code when the application loads. Exploitation of this issue requires user interaction in that a victim must run the vulnerable application.
CVE-2025-21128 (CWE-121, CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21129 (CWE-122, CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21130 (CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21131 (CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21132 (CWE-787)
CVSS 3.1 score: 7.8 (HIGH)
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21133 (CWE-191)
CVSS 3.1 score: 7.8 (HIGH)
Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21134 (CWE-191)
CVSS 3.1 score: 7.8 (HIGH)
Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.