deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-29838
Published: 2025-05-13
Description: Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.
CVSS Score: 7.4 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29838
CVE: CVE-2025-29839
Published: 2025-05-13
Description: Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29839
CVE: CVE-2025-29840
Published: 2025-05-13
Description: Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29840
CVE: CVE-2025-29841
Published: 2025-05-13
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29841
CVE: CVE-2025-29842
Published: 2025-05-13
Description: Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-349, CWE-345
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29842
CVE: CVE-2025-29954
Published: 2025-05-13
Description: Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29954
CVE: CVE-2025-29955
Published: 2025-05-13
Description: Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29955
CVE: CVE-2025-29956
Published: 2025-05-13
Description: Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29956
CVE: CVE-2025-29957
Published: 2025-05-13
Description: Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29957
CVE: CVE-2025-29958
Published: 2025-05-13
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29958
CVE: CVE-2025-29959
Published: 2025-05-13
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29959
CVE: CVE-2025-29960
Published: 2025-05-13
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29960
CVE: CVE-2025-29961
Published: 2025-05-13
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29961
CVE: CVE-2025-29962
Published: 2025-05-13
Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29962
CVE: CVE-2025-29963
Published: 2025-05-13
Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29963
CVE: CVE-2025-29964
Published: 2025-05-13
Description: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29964
CVE: CVE-2025-29966
Published: 2025-05-13
Description: Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29966
CVE: CVE-2025-29967
Published: 2025-05-13
Description: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29967
CVE: CVE-2025-29968
Published: 2025-05-13
Description: Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29968
CVE: CVE-2025-29969
Published: 2025-05-13
Description: Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29969
CVE: CVE-2025-29970
Published: 2025-05-13
Description: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29970
CVE: CVE-2025-29971
Published: 2025-05-13
Description: Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29971
CVE: CVE-2025-29973
Published: 2025-05-13
Description: Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29973
CVE: CVE-2025-29974
Published: 2025-05-13
Description: Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-125, CWE-191, CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29974
CVE: CVE-2025-29975
Published: 2025-05-13
Description: Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29975
CVE: CVE-2025-29976
Published: 2025-05-13
Description: Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29976
CVE: CVE-2025-29977
Published: 2025-05-13
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29977
CVE: CVE-2025-29978
Published: 2025-05-13
Description: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29978
CVE: CVE-2025-29979
Published: 2025-05-13
Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29979
CVE: CVE-2025-30310
Published: 2025-05-13
Description: Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://helpx.adobe.com/security/products/dreamweaver/apsb25-35.html
CVE: CVE-2025-30318
Published: 2025-05-13
Description: InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb25-37.html
CVE: CVE-2025-30319
Published: 2025-05-13
Description: InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/indesign/apsb25-37.html
CVE: CVE-2025-30320
Published: 2025-05-13
Description: InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/indesign/apsb25-37.html
CVE: CVE-2025-30375
Published: 2025-05-13
Description: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30375
CVE: CVE-2025-30376
Published: 2025-05-13
Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-125, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30376
CVE: CVE-2025-30377
Published: 2025-05-13
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30377
CVE: CVE-2025-30378
Published: 2025-05-13
Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30378
CVE: CVE-2025-30379
Published: 2025-05-13
Description: Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-763
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30379
CVE: CVE-2025-30381
Published: 2025-05-13
Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-822, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30381
CVE: CVE-2025-30382
Published: 2025-05-13
Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30382
CVE: CVE-2025-30383
Published: 2025-05-13
Description: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30383
CVE: CVE-2025-30384
Published: 2025-05-13
Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVSS Score: 7.4 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30384
CVE: CVE-2025-30385
Published: 2025-05-13
Description: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30385
CVE: CVE-2025-30386
Published: 2025-05-13
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30386
CVE: CVE-2025-30387
Published: 2025-05-13
Description: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30387
CVE: CVE-2025-30388
Published: 2025-05-13
Description: Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30388
CVE: CVE-2025-30393
Published: 2025-05-13
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30393
CVE: CVE-2025-30394
Published: 2025-05-13
Description: Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30394
CVE: CVE-2025-30397
Published: 2025-05-13
Description: Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30397; https://www.vicarius.io/vsociety/posts/cve-2025-30397-type-confusion-vulnerability-in-microsoft-scripting-engine-detection-script; https://www.vicarius.io/vsociety/posts/cve-2025-30397-type-confusion-vulnerability-in-microsoft-scripting-engine-mitigation-script
CVE: CVE-2025-30400
Published: 2025-05-13
Description: Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30400; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-30400
CVE: CVE-2025-32701
Published: 2025-05-13
Description: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32701; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32701
CVE: CVE-2025-32702
Published: 2025-05-13
Description: Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32702
CVE: CVE-2025-32703
Published: 2025-05-13
Description: Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-1220
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32703
CVE: CVE-2025-32704
Published: 2025-05-13
Description: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-126, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32704
CVE: CVE-2025-32705
Published: 2025-05-13
Description: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32705
CVE: CVE-2025-32706
Published: 2025-05-13
Description: Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32706; https://www.vicarius.io/vsociety/posts/cve-2025-32706-detection-script-elevation-of-privilege-vulnerability-in-microsoft-windows-common-log-file-system-driver; https://www.vicarius.io/vsociety/posts/cve-2025-32706-mitigation-script-elevation-of-privilege-vulnerability-in-microsoft-windows-common-log-file-system-driver
CVE: CVE-2025-32707
Published: 2025-05-13
Description: Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32707
CVE: CVE-2025-32709
Published: 2025-05-13
Description: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32709; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32709
CVE: CVE-2025-3757
Published: 2025-05-13
Description: Versions of OpenPubkey library prior to 0.10.0  contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305, CWE-347
References: https://github.com/openpubkey/openpubkey
CVE: CVE-2025-47280
Published: 2025-05-13
Description: Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email message, making any form with this workflow configured vulnerable, as it allows sending the message from a trusted system and address, potentially bypassing spam and email client security systems. This issue affects all (supported) versions Umbraco Forms and is patched in 13.4.2 and 15.1.2. Unpatched or unsupported versions can workaround this issue by using the `Send email with template (Razor)` workflow instead or writing a custom workflow type. To avoid accidentally using the vulnerable workflow again, the `SendEmail` workflow type can be removed using a composer available in the GitHub Security Advisory for this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-116
References: https://github.com/umbraco/Umbraco.Forms.Issues/security/advisories/GHSA-2qrj-g9hq-chph
CVE: CVE-2025-4658
Published: 2025-05-13
Description: Versions of OpenPubkey library prior to 0.10.0  contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305, CWE-347
References: https://github.com/openpubkey/opkssh
CVE: CVE-2023-31358
Published: 2025-05-13
Description: A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-427
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html
CVE: CVE-2023-31359
Published: 2025-05-13
Description: Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html
CVE: CVE-2025-27197
Published: 2025-05-13
Description: Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/lightroom/apsb25-29.html
CVE: CVE-2025-30322
Published: 2025-05-13
Description: Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_painter/apsb25-38.html
CVE: CVE-2025-30324
Published: 2025-05-13
Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/photoshop/apsb25-40.html
CVE: CVE-2025-30325
Published: 2025-05-13
Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://helpx.adobe.com/security/products/photoshop/apsb25-40.html
CVE: CVE-2025-30326
Published: 2025-05-13
Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/photoshop/apsb25-40.html
CVE: CVE-2025-30328
Published: 2025-05-13
Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb25-42.html