deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-30159
Published: 2025-05-13
Description: Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the `snippet()` helper or `$kirby->snippet()` method with a dynamic snippet name (such as a snippet name that depends on request or user data). Sites that only use fixed calls to the `snippet()` helper/`$kirby->snippet()` method (i.e. calls with a simple string for the snippet name) are *not* affected. A missing path traversal check allowed attackers to navigate and access all files on the server that were accessible to the PHP process, including files outside of the snippets root or even outside of the Kirby installation. PHP code within such files was executed. Such attacks first require an attack vector in the site code that is caused by dynamic snippet names, such as `snippet('tags-' . get('tags'))`. It generally also requires knowledge of the site structure and the server's file system by the attacker, although it can be possible to find vulnerable setups through automated methods such as fuzzing. In a vulnerable setup, this could cause damage to the confidentiality and integrity of the server. The problem has been patched in Kirby 3.9.8.3, Kirby 3.10.1.2, and Kirby 4.7.1. In all of the mentioned releases, Kirby maintainers have added a check for the snippet path that ensures that the resulting path is contained within the configured snippets root. Snippet paths that point outside of the snippets root will not be loaded.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-23
References: https://github.com/getkirby/kirby/releases/tag/3.10.1.2; https://github.com/getkirby/kirby/releases/tag/3.9.8.3; https://github.com/getkirby/kirby/releases/tag/4.7.1
CVE: CVE-2025-32756
Published: 2025-05-13
Description: A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-254; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32756
CVE: CVE-2025-44039
Published: 2025-05-13
Description: CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console. This vulnerability allows local attackers to connect to the UART port via a serial connection, read all boot sequence, and revealing internal system details and sensitive information without any authentication.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-306
References: https://github.com/Yashodhanvivek/CP-XR-DE21-S--4G-Router-Vulnerabilities/blob/main/input.md
CVE: CVE-2025-44831
Published: 2025-05-13
Description: EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/3xxx/engineercms/issues/91
CVE: CVE-2025-45859
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-120
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/4/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2025-45864
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-120
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/8/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2025-45866
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-120
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/9/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2025-45867
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-121
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/10/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2024-46506
Published: 2025-05-13
Description: NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/; https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/
CVE: CVE-2024-48766
Published: 2025-05-13
Description: NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
CVSS Score: 8.6 (HIGH)
CWE: CWE-698, CWE-22
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/netalertx_file_read.rb; https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/; https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/
CVE: CVE-2024-56526
Published: 2025-05-13
Description: An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://bugs.oxid-esales.com/view.php?id=7743
CVE: CVE-2025-22462
Published: 2025-05-13
Description: An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gain administrative access to the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-on-premises-only-CVE-2025-22462
CVE: CVE-2025-28055
Published: 2025-05-13
Description: upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gist.github.com/LTLTLXEY/eb5e07436e0fcaca9747cd4467055f14; https://github.com/shinnku-nikaidou/upset-gal-web/issues/132
CVE: CVE-2025-28056
Published: 2025-05-13
Description: rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/LTLTLXEY/c34dc785fc24f4cbb026e2ef3d7660c4; https://github.com/getrebuild/rebuild/issues/866
CVE: CVE-2025-30207
Published: 2025-05-13
Description: Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other server software (such as Apache, nginx or Caddy) are not affected. A missing path traversal check allowed attackers to navigate all files on the server that were accessible to the PHP process, including files outside of the Kirby installation. The vulnerable implementation delegated all existing files to PHP, including existing files outside of the document root. This leads to a different response that allows attackers to determine whether the requested file exists. Because Kirby's router only delegates such requests to PHP and does not load or execute them, contents of the files were not exposed as PHP treats requests to files outside of the document root as invalid. The problem has been patched in Kirby 3.9.8.3, Kirby 3.10.1.2, and Kirby 4.7.1. In all of the mentioned releases, the maintainers of Kirby have updated the router to check if existing static files are within the document root. Requests to files outside the document root are treated as page requests of the error page and will no longer allow to determine whether the file exists or not.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-23
References: https://github.com/getkirby/kirby/releases/tag/3.10.1.2; https://github.com/getkirby/kirby/releases/tag/3.9.8.3; https://github.com/getkirby/kirby/releases/tag/4.7.1
CVE: CVE-2025-31493
Published: 2025-05-13
Description: Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the `collection()` helper or `$kirby->collection()` method with a dynamic collection name (such as a collection name that depends on request or user data). Sites that only use fixed calls to the `collection()` helper/`$kirby->collection()` method (i.e. calls with a simple string for the collection name) are *not* affected. A missing path traversal check allowed attackers to navigate and access all files on the server that were accessible to the PHP process, including files outside of the collections root or even outside of the Kirby installation. PHP code within such files was executed. Such attacks first require an attack vector in the site code that is caused by dynamic collection names, such as `collection('tags-' . get('tags'))`. It generally also requires knowledge of the site structure and the server's file system by the attacker, although it can be possible to find vulnerable setups through automated methods such as fuzzing. In a vulnerable setup, this could cause damage to the confidentiality and integrity of the server. The problem has been patched in Kirby 3.9.8.3, Kirby 3.10.1.2, and Kirby 4.7.1. In all of the mentioned releases, the maintainers of Kirby have added a check for the collection path that ensures that the resulting path is contained within the configured collections root. Collection paths that point outside of the collections root will not be loaded.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-23
References: https://github.com/getkirby/kirby/releases/tag/3.10.1.2; https://github.com/getkirby/kirby/releases/tag/3.9.8.3; https://github.com/getkirby/kirby/releases/tag/4.7.1
CVE: CVE-2025-45857
Published: 2025-05-13
Description: EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/EDIMAX/CV7428NS/1.md; https://www.edimax.com/
CVE: CVE-2025-45858
Published: 2025-05-13
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a command injection vulnerability via the FUN_00459fdc function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/injection1.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html; https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/injection1.md
CVE: CVE-2025-46721
Published: 2025-05-13
Description: nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site (either via XSS, or otherwise) to bypass CSRF checks and issue requests on user's behalf. Due to misuse of the Go `net/http` library, nosurf categorizes all incoming requests as plain-text HTTP requests, in which case the `Referer` header is not checked to have the same origin as the target webpage. If the attacker has control over HTML contents on either the target website (e.g. `example.com`), or on a website hosted on a subdomain of the target (e.g. `attacker.example.com`), they will also be able to manipulate cookies set for the target website. By acquiring the secret CSRF token from the cookie, or overriding the cookie with a new token known to the attacker, `attacker.example.com` is able to craft cross-site requests to `example.com`. A patch for the issue was released in nosurf 1.2.0. In lieu of upgrading to a patched version of nosurf, users may additionally use another HTTP middleware to ensure that a non-safe HTTP request is coming from the same origin (e.g. by requiring a `Sec-Fetch-Site: same-origin` header in the request).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://github.com/advisories/GHSA-rq77-p4h8-4crw; https://github.com/justinas/nosurf-cve-2025-46721; https://github.com/justinas/nosurf/commit/ec9bb776d8e5ba9e906b6eb70428f4e7b009feee
CVE: CVE-2025-47204
Published: 2025-05-13
Description: An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting (XSS) vulnerability exploitable through Cross-Site Request Forgery (CSRF).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://github.com/davidstutz/bootstrap-multiselect/releases; https://github.com/projectdiscovery/nuclei-templates/commit/11e1a6c11d3954f44acfb0274b6dad4bd8045103
CVE: CVE-2025-47276
Published: 2025-05-13
Description: Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems (OS). Prior to version 1.2.0, Actualizer uses OpenSSL's  "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer users building a full Debian Operating System are affected. Users should upgrade to version 1.2.0 of Actualizer. Existing OS deployment requires manual password changes against the alpha and root accounts. The change will deploy's Debian's yescript overriding the older SHA512 hash created by OpenSSL. As a workaround, users need to reset both `root` and "Alpha" users' passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-328
References: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html; https://github.com/ChewKeanHo/Actualizer/commit/32c9cc232c856f078f8269fba80ce7562bbff86b; https://github.com/ChewKeanHo/Actualizer/issues/1
CVE: CVE-2025-47278
Published: 2025-05-13
Description: Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the `itsdangerous` library. A list of keys can be passed, and it expects the last (top) key in the list to be the most recent key, and uses that for signing. Flask was incorrectly constructing that list in reverse, passing the signing key first. Sites that have opted-in to use key rotation by setting `SECRET_KEY_FALLBACKS` care likely to unexpectedly be signing their sessions with stale keys, and their transition to fresher keys will be impeded. Sessions are still signed, so this would not cause any sort of data integrity loss. Version 3.1.1 contains a patch for the issue.
CWE: CWE-683
References: https://github.com/pallets/flask/commit/73d6504063bfa00666a92b07a28aaf906c532f09; https://github.com/pallets/flask/releases/tag/3.1.1; https://github.com/pallets/flask/security/advisories/GHSA-4grg-w6v8-c28g
CVE: CVE-2025-4427
Published: 2025-05-13
Description: An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-288
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4427
CVE: CVE-2025-4428
Published: 2025-05-13
Description: Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4428
CVE: CVE-2024-21960
Published: 2025-05-13
Description: Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9014.html
CVE: CVE-2024-36321
Published: 2025-05-13
Description: Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-428
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html
CVE: CVE-2024-36339
Published: 2025-05-13
Description: A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9014.html
CVE: CVE-2024-6364
Published: 2025-05-13
Description: A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device.  To remediate this vulnerability, update the device firmware to the latest available version. Please contact the device manufacturer for upgrade instructions or contact Absolute Security, see reference below.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-284
References: https://www.absolute.com/platform/vulnerability-archive/cve-2024-6364
CVE: CVE-2025-0035
Published: 2025-05-13
Description: Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-428
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html
CVE: CVE-2025-21264
Published: 2025-05-13
Description: Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVSS Score: 7.1 (HIGH)
CWE: CWE-552
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21264
CVE: CVE-2025-24063
Published: 2025-05-13
Description: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24063
CVE: CVE-2025-26677
Published: 2025-05-13
Description: Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26677
CVE: CVE-2025-26684
Published: 2025-05-13
Description: External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-73, CWE-610
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26684
CVE: CVE-2025-26685
Published: 2025-05-13
Description: Improper authentication in Microsoft Defender for Identity allows an unauthorized attacker to perform spoofing over an adjacent network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26685
CVE: CVE-2025-27468
Published: 2025-05-13
Description: Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-269, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27468
CVE: CVE-2025-27488
Published: 2025-05-13
Description: Use of hard-coded credentials in Windows Hardware Lab Kit allows an authorized attacker to elevate privileges locally.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-798
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27488
CVE: CVE-2025-29826
Published: 2025-05-13
Description: Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
CVSS Score: 7.3 (HIGH)
CWE: CWE-280, CWE-755
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29826
CVE: CVE-2025-29829
Published: 2025-05-13
Description: Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29829
CVE: CVE-2025-29830
Published: 2025-05-13
Description: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29830
CVE: CVE-2025-29831
Published: 2025-05-13
Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29831
CVE: CVE-2025-29832
Published: 2025-05-13
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29832
CVE: CVE-2025-29833
Published: 2025-05-13
Description: Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.
CVSS Score: 7.7 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29833
CVE: CVE-2025-29835
Published: 2025-05-13
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-476, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29835
CVE: CVE-2025-29836
Published: 2025-05-13
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29836
CVE: CVE-2025-29837
Published: 2025-05-13
Description: Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29837