Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53730 State: PUBLISHED Published: 2025-08-12T17:09:45.935Z Last Updated: 2025-11-10T00:11:49.668Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024 Problem Types: CWE-416 Description: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53730
CVE ID: CVE-2025-53731 State: PUBLISHED Published: 2025-08-12T17:10:31.255Z Last Updated: 2025-11-10T00:12:35.945Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Office 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53731
CVE ID: CVE-2025-53732 State: PUBLISHED Published: 2025-08-12T17:10:31.822Z Last Updated: 2025-11-10T00:12:36.571Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office for Android, Microsoft Office for Universal Problem Types: CWE-122 Description: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53732
CVE ID: CVE-2025-53733 State: PUBLISHED Published: 2025-08-12T17:10:32.310Z Last Updated: 2025-11-10T00:12:37.045Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 Problem Types: CWE-681 Description: Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally. Additional Analyst Notes:
umeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53733
CVE ID: CVE-2025-53734 State: PUBLISHED Published: 2025-08-12T17:10:32.943Z Last Updated: 2025-11-10T00:12:37.605Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024 Problem Types: CWE-416 Description: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53734
CVE ID: CVE-2025-53735 State: PUBLISHED Published: 2025-08-12T17:10:33.644Z Last Updated: 2025-11-10T00:12:38.164Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vul
de locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53735
CVE ID: CVE-2025-53736 State: PUBLISHED Published: 2025-08-12T17:10:34.305Z Last Updated: 2025-11-10T00:12:38.720Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 Problem Types: CWE-126 Description: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vuln
t Office Word allows an unauthorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53736
CVE ID: CVE-2025-53737 State: PUBLISHED Published: 2025-08-12T17:10:34.870Z Last Updated: 2025-11-10T00:12:39.381Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-122 Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/upda
o execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53737
CVE ID: CVE-2025-53738 State: PUBLISHED Published: 2025-08-12T17:10:35.471Z Last Updated: 2025-11-10T00:12:39.939Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5373
nalyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53738
CVE ID: CVE-2025-53739 State: PUBLISHED Published: 2025-08-12T17:10:36.063Z Last Updated: 2025-11-10T00:12:40.432Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-843 Description: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References
l allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53739
CVE ID: CVE-2025-53740 State: PUBLISHED Published: 2025-08-12T17:10:36.557Z Last Updated: 2025-11-10T00:12:40.982Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Office 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53740
CVE ID: CVE-2025-53741 State: PUBLISHED Published: 2025-08-12T17:09:47.076Z Last Updated: 2025-11-10T00:11:50.283Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016 Problem Types: CWE-122 Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/upda
o execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53741
CVE ID: CVE-2025-53742 State: PUBLISHED Published: 2025-07-09T15:39:55.473Z Last Updated: 2025-11-04T21:12:34.567Z Vendors: Jenkins Project Products: Jenkins Applitools Eyes Plugin Description: Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3510
CVE ID: CVE-2025-53743 State: PUBLISHED Published: 2025-07-09T15:39:56.051Z Last Updated: 2025-11-04T21:12:35.873Z Vendors: Jenkins Project Products: Jenkins Applitools Eyes Plugin Description: Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3510
CVE ID: CVE-2025-53744 State: PUBLISHED Published: 2025-08-12T18:59:22.011Z Last Updated: 2025-08-13T15:04:29.902Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-266 Description: An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with high privileges to escalate their privileges to super-admin via registering the device to a malicious FortiManager. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://f
ering the device to a malicious FortiManager. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-173
CVE ID: CVE-2025-53746 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:08.264Z Description: No description available.
CVE ID: CVE-2025-53747 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:07.700Z Description: No description available.
CVE ID: CVE-2025-53748 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:07.226Z Description: No description available.
CVE ID: CVE-2025-53749 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:06.729Z Description: No description available.
CVE ID: CVE-2025-53750 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:06.208Z Description: No description available.
CVE ID: CVE-2025-53751 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:05.688Z Description: No description available.
CVE ID: CVE-2025-53752 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:05.168Z Description: No description available.
CVE ID: CVE-2025-53753 State: REJECTED Published: N/A Last Updated: 2025-07-10T02:55:04.598Z Description: No description available.
CVE ID: CVE-2025-53754 State: PUBLISHED Published: 2025-07-16T11:13:48.388Z Last Updated: 2025-07-16T15:52:41.008Z Vendors: Digisol Products: XPON ONU Wi-Fi Router (DG-GR6821AC) Problem Types: CWE-798 Description: This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to obtain the stored root access credentials. Successful exploitation of this vulnerability could allow the attacker to gain admin access to the targeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
allow the attacker to gain admin access to the targeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147
CVE ID: CVE-2025-53755 State: PUBLISHED Published: 2025-07-16T11:18:02.302Z Last Updated: 2025-07-16T18:52:02.552Z Vendors: Digisol Products: XPON ONU Wi-Fi Router (DG-GR6821AC) Problem Types: CWE-312 Description: This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted data stored in the firmware of targeted device. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the network of the targeted device. Additi
of this vulnerability could allow the attacker to gain unauthorized access to the network of the targeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147
CVE ID: CVE-2025-53756 State: PUBLISHED Published: 2025-07-16T11:21:32.020Z Last Updated: 2025-07-16T18:51:21.505Z Vendors: Digisol Products: XPON ONU Wi-Fi Router (DG-GR6821AC) Problem Types: CWE-319 Description: This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServle
rgeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147
CVE ID: CVE-2025-53757 State: PUBLISHED Published: 2025-07-16T11:25:05.468Z Last Updated: 2025-07-16T18:50:46.637Z Vendors: Digisol Products: XPON ONU Wi-Fi Router (DG-GR6821AC) Problem Types: CWE-614, CWE-1004 Description: This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device. Additional Analyst Notes: - CISA ADP Vulnr
allow the attacker to obtain sensitive information from the targeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147
CVE ID: CVE-2025-53758 State: PUBLISHED Published: 2025-07-16T11:29:12.703Z Last Updated: 2025-07-16T13:01:22.676Z Vendors: Digisol Products: XPON ONU Wi-Fi Router (DG-GR6821AC) Problem Types: CWE-312 Description: This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the hardcoded default credentials stored in the firmware of the targeted device. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted device. Additional An
itation of this vulnerability could allow the attacker to gain unauthorized access to the targeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147
CVE ID: CVE-2025-53759 State: PUBLISHED Published: 2025-08-12T17:09:47.717Z Last Updated: 2025-11-10T00:11:50.814Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024 Problem Types: CWE-908 Description: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerabil
lly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53759
CVE ID: CVE-2025-53760 State: PUBLISHED Published: 2025-08-12T17:09:48.311Z Last Updated: 2025-11-10T00:11:51.415Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-918 Description: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53760
CVE ID: CVE-2025-53761 State: PUBLISHED Published: 2025-08-12T17:09:49.000Z Last Updated: 2025-11-10T00:11:51.929Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft PowerPoint 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53761
CVE ID: CVE-2025-53762 State: PUBLISHED Published: 2025-07-18T17:04:46.626Z Last Updated: 2025-08-23T00:40:42.050Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Purview Problem Types: CWE-183 Description: Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53762
CVE ID: CVE-2025-53763 State: PUBLISHED Published: 2025-08-21T19:49:42.709Z Last Updated: 2025-11-10T00:11:55.992Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Purview Data Governance Problem Types: CWE-284 Description: Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53763
CVE ID: CVE-2025-53765 State: PUBLISHED Published: 2025-08-12T17:10:37.127Z Last Updated: 2025-11-10T00:12:41.628Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Stack Hub Problem Types: CWE-359 Description: Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53765
CVE ID: CVE-2025-53766 State: PUBLISHED Published: 2025-08-12T17:10:37.678Z Last Updated: 2025-11-10T00:12:42.266Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016,
), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Microsoft Office for Android, Microsoft Office for Universal Problem Types: CWE-122 Description: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute c
blem Types: CWE-122 Description: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766
CVE ID: CVE-2025-53767 State: PUBLISHED Published: 2025-08-07T21:01:02.345Z Last Updated: 2025-11-10T00:12:50.096Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Open AI Problem Types: CWE-918 Description: Azure OpenAI Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53767
CVE ID: CVE-2025-53768 State: PUBLISHED Published: 2025-10-14T17:00:57.742Z Last Updated: 2025-11-22T04:09:04.434Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 Version 25H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607 Problem Types: CWE-416, CWE-362 Description: Use after free in Xbox allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/u
levate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53768
CVE ID: CVE-2025-53769 State: PUBLISHED Published: 2025-08-12T17:10:38.187Z Last Updated: 2025-11-10T00:12:42.800Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Security App Problem Types: CWE-73 Description: External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53769