Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-21133 State: PUBLISHED Published: 2025-01-14T19:05:26.082Z Last Updated: 2025-01-24T04:56:17.622Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator on iPad Problem Types: CWE-191 Description: Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb
lyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-04.html
CVE ID: CVE-2025-21134 State: PUBLISHED Published: 2025-01-14T19:05:26.870Z Last Updated: 2025-01-24T04:56:19.100Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator on iPad Problem Types: CWE-191 Description: Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb
CVE ID: CVE-2025-21135 State: PUBLISHED Published: 2025-01-14T19:09:23.147Z Last Updated: 2025-01-14T20:27:03.569Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-191 Description: Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb25-05.html
CVE ID: CVE-2025-21136 State: PUBLISHED Published: 2025-01-14T19:16:36.874Z Last Updated: 2025-02-12T20:31:17.956Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-787 Description: Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-06.html
CVE ID: CVE-2025-21137 State: PUBLISHED Published: 2025-01-14T19:16:34.376Z Last Updated: 2025-02-12T20:31:18.371Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-122 Description: Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-06.html
CVE ID: CVE-2025-21138 State: PUBLISHED Published: 2025-01-14T19:16:36.033Z Last Updated: 2025-02-12T20:31:18.106Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-787 Description: Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-06.html
CVE ID: CVE-2025-21139 State: PUBLISHED Published: 2025-01-14T19:16:35.169Z Last Updated: 2025-02-12T20:31:18.247Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-122 Description: Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-06.html
CVE ID: CVE-2025-21155 State: PUBLISHED Published: 2025-02-11T17:16:05.608Z Last Updated: 2025-02-12T20:51:46.614Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Substance3D - Stager Problem Types: CWE-476 Description: Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
ser interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb25-09.html
CVE ID: CVE-2025-21156 State: PUBLISHED Published: 2025-02-11T17:21:25.696Z Last Updated: 2025-02-14T04:55:34.718Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-191 Description: InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb25-10.html
CVE ID: CVE-2025-21157 State: PUBLISHED Published: 2025-02-11T17:10:45.344Z Last Updated: 2025-03-01T04:55:53.513Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-787 Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE ID: CVE-2025-21158 State: PUBLISHED Published: 2025-02-11T17:10:47.804Z Last Updated: 2025-03-01T04:55:54.837Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-191 Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-01.htm
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE ID: CVE-2025-21159 State: PUBLISHED Published: 2025-02-11T17:27:39.557Z Last Updated: 2025-02-14T04:55:28.600Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-416 Description: Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb25-11.html
CVE ID: CVE-2025-21160 State: PUBLISHED Published: 2025-02-11T17:27:41.155Z Last Updated: 2025-02-14T04:55:30.149Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-191 Description: Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb25-11.html
CVE ID: CVE-2025-21161 State: PUBLISHED Published: 2025-02-11T17:31:44.620Z Last Updated: 2025-02-11T18:58:19.144Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-787 Description: Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-12.html
CVE ID: CVE-2025-21162 State: PUBLISHED Published: 2025-02-11T17:35:12.816Z Last Updated: 2025-02-11T18:58:12.198Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Adobe Products: Photoshop Elements Problem Types: CWE-379 Description: Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/pho
ous file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop_elements/apsb25-13.html
CVE ID: CVE-2025-21163 State: PUBLISHED Published: 2025-02-11T17:27:40.356Z Last Updated: 2025-02-14T04:55:31.829Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-121 Description: Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb25-11.html
CVE ID: CVE-2025-21164 State: PUBLISHED Published: 2025-07-08T16:39:18.609Z Last Updated: 2025-07-08T16:55:18.244Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-787 Description: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-62.html
CVE ID: CVE-2025-21165 State: PUBLISHED Published: 2025-07-08T16:39:21.437Z Last Updated: 2025-07-08T16:55:39.562Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-787 Description: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-62.html
CVE ID: CVE-2025-21166 State: PUBLISHED Published: 2025-07-08T16:39:20.665Z Last Updated: 2025-07-08T16:55:55.559Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-787 Description: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-62.html
CVE ID: CVE-2025-21167 State: PUBLISHED Published: 2025-07-08T16:39:19.411Z Last Updated: 2025-07-08T16:59:48.498Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-125 Description: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/securit
open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-62.html
CVE ID: CVE-2025-21168 State: PUBLISHED Published: 2025-07-08T16:39:22.216Z Last Updated: 2025-07-08T16:59:31.007Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-125 Description: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/securit
CVE ID: CVE-2025-21169 State: PUBLISHED Published: 2025-03-11T16:26:05.409Z Last Updated: 2025-03-12T04:00:53.592Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Designer Problem Types: CWE-122 Description: Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_designer/apsb25-22.html
CVE ID: CVE-2025-21170 State: PUBLISHED Published: 2025-03-11T20:11:54.509Z Last Updated: 2025-03-11T20:38:51.219Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-476 Description: Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
s user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html
CVE ID: CVE-2025-21171 State: PUBLISHED Published: 2025-01-14T18:03:22.942Z Last Updated: 2025-09-09T23:45:27.157Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: PowerShell 7.5, .NET 9.0, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10 Problem Types: CWE-122 Description: .NET Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21171
CVE ID: CVE-2025-21172 State: PUBLISHED Published: 2025-01-14T18:04:38.469Z Last Updated: 2025-09-09T23:46:43.638Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2015 Update 3, Microsoft Visual Studio 2022 version 17.12, .NET 8.0, .NET 9.0 Problem Types: CWE-190, CWE-122 Description: .NET and Visual Studio Remote Code Execution Vulnerability A
8.0, .NET 9.0 Problem Types: CWE-190, CWE-122 Description: .NET and Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21172
CVE ID: CVE-2025-21173 State: PUBLISHED Published: 2025-01-14T18:04:02.074Z Last Updated: 2025-09-09T23:46:05.145Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: .NET 8.0, .NET 9.0, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10 Problem Types: CWE-379 Description: .NET Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21173
CVE ID: CVE-2025-21174 State: PUBLISHED Published: 2025-04-08T17:23:35.856Z Last Updated: 2025-06-04T17:53:43.452Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2025 (Server Core installation), Windows Server 2025, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-400 Description: Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny servi
resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21174
CVE ID: CVE-2025-21176 State: PUBLISHED Published: 2025-01-14T18:04:00.852Z Last Updated: 2025-09-09T23:46:04.467Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2015 Update 3, Microsoft Visual Studio 2022 version 17.12, .NET 8.0, .NET 9.0, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4
8.0, .NET 9.0, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 4.6/4.6.2 Problem Types: CWE-126 Description: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21176
CVE ID: CVE-2025-21177 State: PUBLISHED Published: 2025-02-06T22:41:32.021Z Last Updated: 2025-03-12T01:42:20.046Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Dynamics 365 Sales Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21177
CVE ID: CVE-2025-21178 State: PUBLISHED Published: 2025-01-14T18:04:01.376Z Last Updated: 2025-09-09T23:47:04.072Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2015 Update 3, Microsoft Visual Studio 2022 version 17.12 Problem Types: CWE-122, CWE-125 Description: Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CI
em Types: CWE-122, CWE-125 Description: Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21178
CVE ID: CVE-2025-21179 State: PUBLISHED Published: 2025-02-11T17:58:40.108Z Last Updated: 2025-03-12T01:42:40.081Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-125 Description: DHCP Client Service Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21179
CVE ID: CVE-2025-21180 State: PUBLISHED Published: 2025-03-11T16:59:01.782Z Last Updated: 2025-05-19T21:38:01.486Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind