deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-53133
Published: 2025-08-12
Description: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53133
CVE: CVE-2025-53134
Published: 2025-08-12
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-200, CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53134
CVE: CVE-2025-53135
Published: 2025-08-12
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53135
CVE: CVE-2025-53136
Published: 2025-08-12
Description: Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53136
CVE: CVE-2025-53137
Published: 2025-08-12
Description: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53137
CVE: CVE-2025-53138
Published: 2025-08-12
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53138
CVE: CVE-2025-53140
Published: 2025-08-12
Description: Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53140
CVE: CVE-2025-53141
Published: 2025-08-12
Description: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53141
CVE: CVE-2025-53142
Published: 2025-08-12
Description: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53142
CVE: CVE-2025-53143
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53143
CVE: CVE-2025-53144
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53144
CVE: CVE-2025-53145
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53145
CVE: CVE-2025-53147
Published: 2025-08-12
Description: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53147
CVE: CVE-2025-53148
Published: 2025-08-12
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53148
CVE: CVE-2025-53149
Published: 2025-08-12
Description: Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53149; https://www.crowdfense.com/cve-2025-53149-windows-ksthunk-heap-overflow/
CVE: CVE-2025-53151
Published: 2025-08-12
Description: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53151
CVE: CVE-2025-53152
Published: 2025-08-12
Description: Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53152
CVE: CVE-2025-53153
Published: 2025-08-12
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53153
CVE: CVE-2025-53154
Published: 2025-08-12
Description: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53154
CVE: CVE-2025-53155
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53155
CVE: CVE-2025-53156
Published: 2025-08-12
Description: Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53156
CVE: CVE-2025-53716
Published: 2025-08-12
Description: Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53716
CVE: CVE-2025-53718
Published: 2025-08-12
Description: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53718
CVE: CVE-2025-53719
Published: 2025-08-12
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53719
CVE: CVE-2025-53720
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53720
CVE: CVE-2025-53721
Published: 2025-08-12
Description: Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53721
CVE: CVE-2025-53722
Published: 2025-08-12
Description: Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53722
CVE: CVE-2025-53723
Published: 2025-08-12
Description: Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53723
CVE: CVE-2025-53724
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53724
CVE: CVE-2025-53725
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53725
CVE: CVE-2025-53726
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53726
CVE: CVE-2025-53727
Published: 2025-08-12
Description: Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53727
CVE: CVE-2025-53728
Published: 2025-08-12
Description: Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53728
CVE: CVE-2025-53729
Published: 2025-08-12
Description: Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53729
CVE: CVE-2025-53730
Published: 2025-08-12
Description: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53730
CVE: CVE-2025-53731
Published: 2025-08-12
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53731
CVE: CVE-2025-53732
Published: 2025-08-12
Description: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53732
CVE: CVE-2025-53733
Published: 2025-08-12
Description: Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-681
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53733
CVE: CVE-2025-53734
Published: 2025-08-12
Description: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53734
CVE: CVE-2025-53735
Published: 2025-08-12
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53735
CVE: CVE-2025-53736
Published: 2025-08-12
Description: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53736
CVE: CVE-2025-53737
Published: 2025-08-12
Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53737
CVE: CVE-2025-53738
Published: 2025-08-12
Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53738
CVE: CVE-2025-53739
Published: 2025-08-12
Description: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53739
CVE: CVE-2025-53740
Published: 2025-08-12
Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53740
CVE: CVE-2025-53741
Published: 2025-08-12
Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53741
CVE: CVE-2025-53759
Published: 2025-08-12
Description: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53759
CVE: CVE-2025-53760
Published: 2025-08-12
Description: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVSS Score: 7.1 (HIGH)
CWE: CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53760
CVE: CVE-2025-53761
Published: 2025-08-12
Description: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53761
CVE: CVE-2025-53765
Published: 2025-08-12
Description: Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-359
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53765
CVE: CVE-2025-53766
Published: 2025-08-12
Description: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53766
CVE: CVE-2025-53769
Published: 2025-08-12
Description: External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53769
CVE: CVE-2025-53772
Published: 2025-08-12
Description: Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53772
CVE: CVE-2025-53773
Published: 2025-08-12
Description: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53773; https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/; https://news.ycombinator.com/item?id=44883108
CVE: CVE-2025-53778
Published: 2025-08-12
Description: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53778; https://www.vicarius.io/vsociety/posts/cve-2025-53778-detection-script-improper-authentication-vulnerability-affecting-windows-ntlm; https://www.vicarius.io/vsociety/posts/cve-2025-53778-mitigation-script-improper-authentication-vulnerability-affecting-windows-ntlm
CVE: CVE-2025-53779
Published: 2025-08-12
Description: Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
CVSS Score: 7.2 (HIGH)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53779
CVE: CVE-2025-53781
Published: 2025-08-12
Description: Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.
CVSS Score: 7.7 (HIGH)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53781
CVE: CVE-2025-53783
Published: 2025-08-12
Description: Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783
CVE: CVE-2025-53784
Published: 2025-08-12
Description: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53784
CVE: CVE-2025-53788
Published: 2025-08-12
Description: Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53788
CVE: CVE-2025-53789
Published: 2025-08-12
Description: Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53789
CVE: CVE-2025-53793
Published: 2025-08-12
Description: Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53793
CVE: CVE-2023-45584
Published: 2025-08-12
Description: A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-415
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-209
CVE: CVE-2024-26009
Published: 2025-08-12
Description: An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-042
CVE: CVE-2024-40588
Published: 2025-08-12
Description: Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6.1, FortiMail 7.4.0 through 7.4.3, FortiMail 7.2 all versions, FortiMail 7.0 all versions, FortiMail 6.4 all versions, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.6, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiRecorder 6.4 all versions, FortiVoice 7.0.0 through 7.0.3, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-23
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-309
CVE: CVE-2024-48892
Published: 2025-08-12
Description: A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an authenticated attacker to read arbitrary files via uploading a malicious solution pack.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-23
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-421
CVE: CVE-2024-52964
Published: 2025-08-12
Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9 and below 7.0.13 & FortiManager Cloud version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5 and before 7.2.9 allows an authenticated remote attacker to overwrite arbitrary files via FGFM crafted requests.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-473
CVE: CVE-2025-25248
Published: 2025-08-12
Description: An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-364
CVE: CVE-2025-25256
Published: 2025-08-12
Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-152; https://www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/; https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256
CVE: CVE-2025-27759
Published: 2025-08-12
Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI commands
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-150