Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ion, these vulnerabilities cannot be adequately addressed in pure Python. In the short term, consider using this library only in environments where timing measurements by attackers are infeasible. In the medium term, implement your own wrappers around critical operations using constant-time libraries in languages like Rust, Go, or C. In the long term, wait for the planned Rust implementation mentioned in the library documentation that will properly address these issues. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DavidOsipov/PostQuantum-Feldman-VSS/security/advisories/GHSA-q65w-fg65-79f4 - https://en.wikipedia.org/wiki/Side-channel_attack - https://www
um-Feldman-VSS/security/advisories/GHSA-q65w-fg65-79f4 - https://en.wikipedia.org/wiki/Side-channel_attack - https://www.rambus.com/wp-content/uploads/2015/08/TimingAttacks.pdf
CVE ID: CVE-2025-29781 State: PUBLISHED Published: 2025-03-17T21:37:31.856Z Last Updated: 2025-03-18T14:10:03.696Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: metal3-io Products: baremetal-operator Problem Types: CWE-200, CWE-653 Description: The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator enables users to load Secret from arbitrary namespaces upon deployment of the namespace scoped Custom Resource `BMCEventSubscription`. Prior to versions 0.8.1 and 0.9.1, an adversary Kubernetes account with only namespace level roles (e.g. a tenant controlling a namespace) may create a `BMCEventSubsc
y Kubernetes account with only namespace level roles (e.g. a tenant controlling a namespace) may create a `BMCEventSubscription` in his authorized namespace and then load Secrets from his unauthorized namespaces to his authorized namespace via the Baremetal Operator, causing Secret Leakage. The patch makes BMO refuse to read Secrets from other namespace than where the corresponding BMH resource is. The patch does not change the `BMCEventSubscription` API in BMO, but stricter validation will fail the request at admission time. It will also prevent the controller reading such Secrets, in case the BMCES CR has already been deployed. The issue exists for all versions of BMO, and is patched in BM
Secrets, in case the BMCES CR has already been deployed. The issue exists for all versions of BMO, and is patched in BMO releases v0.9.1 and v0.8.1. Prior upgrading to patched BMO version, duplicate any existing Secret pointed to by `BMCEventSubscription`'s `httpHeadersRef` to the same namespace where the corresponding BMH exists. After upgrade, remove the old Secrets. As a workaround, the operator can configure BMO RBAC to be namespace scoped, instead of cluster scoped, to prevent BMO from accessing Secrets from other namespaces, and/or use `WATCH_NAMESPACE` configuration option to limit BMO to single namespace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://githu
option to limit BMO to single namespace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/metal3-io/baremetal-operator/security/advisories/GHSA-c98h-7hp9-v9hq - https://github.com/metal3-io/baremetal-operator/pull/2321 - https://github.com/metal3-io/baremetal-operator/pull/2322 - https://github.com/metal3-io/baremetal-operator/commit/19f8443b1fe182f76dd81b43122e8dd102f8b94c - https://github.com/metal3-io/metal3-docs/blob/main/design/baremetal-operator/bmc-events.md
CVE ID: CVE-2025-29782 State: PUBLISHED Published: 2025-03-14T19:05:40.774Z Last Updated: 2025-03-18T16:26:11.648Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is Web manager for charitable institutions A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_tipo_docs_atendido.php` endpoint in versions of the WeGIA application prior to 3.2.17. This vulnerability allows attackers to inject malicious scripts into the `tipo` parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. Version 3.2.17 contains a patch for the i
er the affected page is accessed by users, posing a significant security risk. Version 3.2.17 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5x5w-5c99-vr8h - https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/v3.2.17
CVE ID: CVE-2025-29783 State: PUBLISHED Published: 2025-03-19T15:33:28.951Z Last Updated: 2025-03-22T00:02:54.404Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: vllm-project Products: vllm Problem Types: CWE-502 Description: vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces will allow attackers to execute remote code on distributed hosts. This is a remote code execution vulnerability impacting any deployments using Mooncake to distribute KV across distributed hosts. This vulnerability is fixed in 0.8.
impacting any deployments using Mooncake to distribute KV across distributed hosts. This vulnerability is fixed in 0.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-x3m8-f7g5-qhm7 - https://github.com/vllm-project/vllm/pull/14228 - https://github.com/vllm-project/vllm/commit/288ca110f68d23909728627d3100e5a8db820aa2
CVE ID: CVE-2025-29784 State: PUBLISHED Published: 2025-04-18T15:50:17.656Z Last Updated: 2025-04-18T16:05:30.640Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NamelessMC Products: Nameless Problem Types: CWE-130, CWE-20, CWE-1284 Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search queries. This oversight can lead to performance degradation and potential denial-of-service (DoS) attacks. This issue has been patched in version 2.2.0. Additional Ana
degradation and potential denial-of-service (DoS) attacks. This issue has been patched in version 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NamelessMC/Nameless/security/advisories/GHSA-4hrq-rf96-c2jm - https://github.com/NamelessMC/Nameless/commit/f5341e56930a98978171e0a871d60f19ab30ebdd - https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0
CVE ID: CVE-2025-29785 State: PUBLISHED Published: 2025-06-02T10:44:18.817Z Last Updated: 2025-06-02T12:01:18.236Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: quic-go Products: quic-go Problem Types: CWE-248 Description: quic-go is an implementation of the QUIC protocol in Go. The loss recovery logic for path probe packets that was added in the v0.50.0 release can be used to trigger a nil-pointer dereference by a malicious QUIC client. In order to do so, the attacker first sends valid QUIC packets from different remote addresses (thereby triggering the newly added path validation logic: the server sends path probe packets), and then sending ACKs for packet
triggering the newly added path validation logic: the server sends path probe packets), and then sending ACKs for packets received from the server specifically crafted to trigger the nil-pointer dereference. v0.50.1 contains a patch that fixes the vulnerability. This release contains a test that generates random sequences of sent packets (both regular and path probe packets), that was used to verify that the patch actually covers all corner cases. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/quic-go/quic-go/security/advisories/GHSA-j972-j939-p2v3 - https://github.com/quic-go/quic-go/issues/4981 - https://github.com/qu
quic-go/security/advisories/GHSA-j972-j939-p2v3 - https://github.com/quic-go/quic-go/issues/4981 - https://github.com/quic-go/quic-go/commit/b90058aba5f65f48e0e150c89bbaa21a72dda4de
CVE ID: CVE-2025-29786 State: PUBLISHED Published: 2025-03-17T13:15:32.836Z Last Updated: 2025-03-17T13:29:29.177Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: expr-lang Products: expr Problem Types: CWE-770 Description: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser is given an unbounded input string, it will attempt to compile the entire string and generate an Abstract Syntax Tree (AST) node for each part of the expression. In scenarios where input size isn’t limited, a malicious or inadvertent extremely large expression can consume excessive memory as the parser builds a huge AST. T
d, a malicious or inadvertent extremely large expression can consume excessive memory as the parser builds a huge AST. This can ultimately lead to*excessive memory usage and an Out-Of-Memory (OOM) crash of the process. This issue is relatively uncommon and will only manifest when there are no restrictions on the input size, i.e. the expression length is allowed to grow arbitrarily large. In typical use cases where inputs are bounded or validated, this problem would not occur. The problem has been patched in the latest versions of the Expr library. The fix introduces compile-time limits on the number of AST nodes and memory usage during parsing, preventing any single expression from exhaustin
-time limits on the number of AST nodes and memory usage during parsing, preventing any single expression from exhausting resources. Users should upgrade to Expr version 1.17.0 or later, as this release includes the new node budget and memory limit safeguards. Upgrading to v1.17.0 ensures that extremely deep or large expressions are detected and safely aborted during compilation, avoiding the OOM condition. For users who cannot immediately upgrade, the recommended workaround is to impose an input size restriction before parsing. In practice, this means validating or limiting the length of expression strings that your application will accept. For example, set a maximum allowable number of cha
g the length of expression strings that your application will accept. For example, set a maximum allowable number of characters (or nodes) for any expression and reject or truncate inputs that exceed this limit. By ensuring no unbounded-length expression is ever fed into the parser, one can prevent the parser from constructing a pathologically large AST and avoid potential memory exhaustion. In short, pre-validate and cap input size as a safeguard in the absence of the patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/expr-lang/expr/security/advisories/GHSA-93mq-9ffx-83m2 - https://github.com/expr-lang/expr/pull/762
CVE ID: CVE-2025-29787 State: PUBLISHED Published: 2025-03-17T13:19:23.925Z Last Updated: 2025-03-19T15:50:49.160Z Vendors: zip-rs Products: zip2 Problem Types: CWE-22, CWE-61, CWE-180 Description: `zip` is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routine of affected versions of the `zip` crate starting with version 1.3.0 and prior to version 2.3.0, symbolic links earlier in the archive are allowed to be used for later files in the archive without validation of the final canonicalized path, allowing maliciously crafted archives to overwrite arbitrary files in the file system when extracted. Users who extract untrusted archive fi
crafted archives to overwrite arbitrary files in the file system when extracted. Users who extract untrusted archive files using the following high-level API method may be affected and critical files on the system may be overwritten with arbitrary file permissions, which can potentially lead to code execution. Version 2.3.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zip-rs/zip2/security/advisories/GHSA-94vh-gphv-8pm8 - https://github.com/zip-rs/zip2/commit/a2e062f37066c3b12860a32eb1cb44856cfb7afe - https://gist.github.com/eternal-flame-AD/bf71ef4f6828e741eb12ce7fd47b7b85 - https://github.com/zip-rs/zip2/releases/tag/v2.3.0
CVE ID: CVE-2025-29788 State: PUBLISHED Published: 2025-03-17T13:25:24.343Z Last Updated: 2025-03-17T14:23:42.688Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Sylius Products: PayPalPlugin Problem Types: CWE-472 Description: The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after initiating the PayPal Express Checkout process, PayPal will not receive the updated total amount. As a result, PayPal captures only the initially
ress Checkout process, PayPal will not receive the updated total amount. As a result, PayPal captures only the initially transmitted amount, while Sylius incorrectly considers the order fully paid based on the modified total. This flaw can be exploited both accidentally and intentionally, potentially enabling fraud by allowing customers to pay less than the actual order value. Attackers can intentionally pay less than the actual total order amount, business owners may suffer financial losses due to underpaid orders, and integrity of payment processing is compromised. The issue is fixed in versions 1.6.1, 1.7.1, 2.0.1, and above. To resolve the problem in the end application without updating
sue is fixed in versions 1.6.1, 1.7.1, 2.0.1, and above. To resolve the problem in the end application without updating to the newest patches, there is a need to overwrite `ProcessPayPalOrderAction`, `CompletePayPalOrderFromPaymentPageAction`, and `CaptureAction` with modified logic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Sylius/PayPalPlugin/security/advisories/GHSA-pqq3-q84h-pj6x - https://github.com/Sylius/PayPalPlugin/commit/31e71b0457e5d887a6c19f8cfabb8b16125ec406 - https://github.com/Sylius/PayPalPlugin/commit/8a81258f965b7860d4bccb52942e4c5b53e6774d - https://github.com/Sylius/PayPalPlugin/releases/tag/v1.6.1 - https://github.com/Sylius/PayP
60d4bccb52942e4c5b53e6774d - https://github.com/Sylius/PayPalPlugin/releases/tag/v1.6.1 - https://github.com/Sylius/PayPalPlugin/releases/tag/v1.7.1 - https://github.com/Sylius/PayPalPlugin/releases/tag/v2.0.1
CVE ID: CVE-2025-29789 State: PUBLISHED Published: 2025-03-25T20:29:29.892Z Last Updated: 2025-03-25T20:39:41.939Z Vendors: openemr Products: openemr Problem Types: CWE-23 Description: OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/security/advisories/GHSA-ffpq-2wqj-v8ff - https://github.com/openemr/openemr/commit/ef3bb7f84ebe8ef54d55416e587ec2fefd065489
CVE ID: CVE-2025-29790 State: PUBLISHED Published: 2025-03-18T18:36:34.279Z Last Updated: 2025-03-18T18:48:39.399Z Vendors: contao Products: contao Problem Types: CWE-79 Description: Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/contao/contao/security/advisories/GHSA-vqqr-fgmh-f626 - https://contao.org/en/security-advisories/cross-site-scripting-through-svg-uploads
CVE ID: CVE-2025-29791 State: PUBLISHED Published: 2025-04-08T17:23:28.860Z Last Updated: 2025-06-04T17:52:42.753Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Office 2016 Problem Types: CWE-843 Description: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.
tacker to execute code locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29791
CVE ID: CVE-2025-29792 State: PUBLISHED Published: 2025-04-08T17:23:29.930Z Last Updated: 2025-06-04T17:52:44.354Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office 2016 Problem Types: CWE-416 Description: Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29792
CVE ID: CVE-2025-29793 State: PUBLISHED Published: 2025-04-08T17:23:29.418Z Last Updated: 2025-06-04T17:52:43.625Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-502 Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29793
CVE ID: CVE-2025-29794 State: PUBLISHED Published: 2025-04-08T17:23:31.211Z Last Updated: 2025-06-04T17:52:45.572Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-285 Description: Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29794
CVE ID: CVE-2025-29795 State: PUBLISHED Published: 2025-03-23T16:11:56.327Z Last Updated: 2025-05-19T21:38:28.597Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge Update Setup Problem Types: CWE-59 Description: Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29795
CVE ID: CVE-2025-29796 State: PUBLISHED Published: 2025-04-04T00:00:16.022Z Last Updated: 2025-06-04T17:52:44.945Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge for iOS Problem Types: CWE-451 Description: User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29796
CVE ID: CVE-2025-29800 State: PUBLISHED Published: 2025-04-08T17:24:13.298Z Last Updated: 2025-06-04T17:53:27.114Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft AutoUpdate for Mac Problem Types: CWE-269 Description: Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29800
CVE ID: CVE-2025-29801 State: PUBLISHED Published: 2025-04-08T17:24:14.548Z Last Updated: 2025-06-04T17:53:28.296Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft AutoUpdate for Mac Problem Types: CWE-276 Description: Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29801
CVE ID: CVE-2025-29802 State: PUBLISHED Published: 2025-04-08T17:24:13.959Z Last Updated: 2025-06-04T17:53:27.691Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.12 Problem Types: CWE-427 Description: Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29802
CVE ID: CVE-2025-29803 State: PUBLISHED Published: 2025-04-12T01:32:36.336Z Last Updated: 2025-06-04T17:53:26.365Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Tools for Applications (VSTA), VSTA 2022 SDK, VSTA 2019 SDK, SQL Server Management Studio 20.2 Problem Types: CWE-427 Description: Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803
CVE ID: CVE-2025-29804 State: PUBLISHED Published: 2025-04-08T17:24:15.218Z Last Updated: 2025-06-04T17:53:28.882Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2022 version 17.13, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10 Problem Types: CWE-284 Description: Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29804
CVE ID: CVE-2025-29805 State: PUBLISHED Published: 2025-04-08T17:24:17.031Z Last Updated: 2025-06-04T17:53:30.649Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Outlook for Android Problem Types: CWE-200 Description: Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29805
CVE ID: CVE-2025-29806 State: PUBLISHED Published: 2025-03-23T16:11:34.578Z Last Updated: 2025-05-19T21:38:06.689Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: CWE-843 Description: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29806