deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-35279
Published: 2025-02-11
Description: A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to evade FortiOS stack protections and provided the fabric service is running on the exposed interface.
CVSS Score: 8.1 (HIGH)
CWE: CWE-121
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-160
CVE: CVE-2024-36508
Published: 2025-02-11
Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose privileges to delete files on the system.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-147
CVE: CVE-2024-40584
Published: 2025-02-11
Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiAnalyzer BigData version 7.4.0, 7.2.0 through 7.2.7, 7.0.1 through 7.0.6, 6.4.5 through 6.4.7 and 6.2.5, Fortinet FortiAnalyzer Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 and Fortinet FortiManager Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 GUI allows an authenticated privileged attacker to execute unauthorized code or commands via crafted HTTPS or HTTP requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-220
CVE: CVE-2024-40586
Published: 2025-02-11
Description: An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-279
CVE: CVE-2024-40591
Published: 2025-02-11
Description: An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-302
CVE: CVE-2024-50567
Published: 2025-02-11
Description: An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-438
CVE: CVE-2024-50569
Published: 2025-02-11
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-438
CVE: CVE-2024-52966
Published: 2025-02-11
Description: An exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0 through 7.6.0 allows attacker to cause information disclosure via filter manipulation.
CVSS Score: 2.3 (LOW)
CWE: CWE-200
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-422
CVE: CVE-2024-52968
Published: 2025-02-11
Description: An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-287
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-300
CVE: CVE-2025-1126
Published: 2025-02-11
Description: A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-807
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2025-21121
Published: 2025-02-11
Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE: CVE-2025-21123
Published: 2025-02-11
Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE: CVE-2025-21124
Published: 2025-02-11
Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE: CVE-2025-21125
Published: 2025-02-11
Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE: CVE-2025-21126
Published: 2025-02-11
Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE: CVE-2025-21157
Published: 2025-02-11
Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE: CVE-2025-21158
Published: 2025-02-11
Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/indesign/apsb25-01.html
CVE: CVE-2025-22399
Published: 2025-02-11
Description: Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery
CVSS Score: 7.9 (HIGH)
CWE: CWE-918
References: https://www.dell.com/support/kbdoc/en-us/000279299/dsa-2025-043-security-update-for-dell-ucc-edge-security-update-for-multiple-vulnerabilities
CVE: CVE-2025-24470
Published: 2025-02-11
Description: An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests.
CVSS Score: 8.6 (HIGH)
CWE: CWE-41
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-015
CVE: CVE-2025-24472
Published: 2025-02-11
Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-535; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24472
CVE: CVE-2019-15002
Published: 2025-02-11
Description: An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under an unexpected account.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-67979
CVE: CVE-2025-21155
Published: 2025-02-11
Description: Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-09.html
CVE: CVE-2025-21156
Published: 2025-02-11
Description: InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/incopy/apsb25-10.html
CVE: CVE-2025-21159
Published: 2025-02-11
Description: Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/illustrator/apsb25-11.html
CVE: CVE-2025-21160
Published: 2025-02-11
Description: Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/illustrator/apsb25-11.html
CVE: CVE-2025-21161
Published: 2025-02-11
Description: Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_designer/apsb25-12.html
CVE: CVE-2025-21162
Published: 2025-02-11
Description: Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-379
References: https://helpx.adobe.com/security/products/photoshop_elements/apsb25-13.html
CVE: CVE-2025-21163
Published: 2025-02-11
Description: Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb25-11.html
CVE: CVE-2025-21179
Published: 2025-02-11
Description: DHCP Client Service Denial of Service Vulnerability
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21179
CVE: CVE-2025-21181
Published: 2025-02-11
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21181; https://www.vicarius.io/vsociety/posts/cve-2025-21181-denial-of-service-vulnerability-in-microsoft-message-queuing-detection-script; https://www.vicarius.io/vsociety/posts/cve-2025-21181-denial-of-service-vulnerability-in-microsoft-message-queuing-mitigation-script
CVE: CVE-2025-21182
Published: 2025-02-11
Description: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21182
CVE: CVE-2025-21183
Published: 2025-02-11
Description: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21183
CVE: CVE-2025-21184
Published: 2025-02-11
Description: Windows Core Messaging Elevation of Privileges Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21184
CVE: CVE-2025-21188
Published: 2025-02-11
Description: Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21188
CVE: CVE-2025-21190
Published: 2025-02-11
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21190
CVE: CVE-2025-21194
Published: 2025-02-11
Description: Microsoft Surface Security Feature Bypass Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194
CVE: CVE-2025-21198
Published: 2025-02-11
Description: Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21198
CVE: CVE-2025-21200
Published: 2025-02-11
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21200
CVE: CVE-2025-21201
Published: 2025-02-11
Description: Windows Telephony Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21201
CVE: CVE-2025-21206
Published: 2025-02-11
Description: Visual Studio Installer Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21206
CVE: CVE-2025-21208
Published: 2025-02-11
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21208
CVE: CVE-2025-21212
Published: 2025-02-11
Description: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21212
CVE: CVE-2025-21216
Published: 2025-02-11
Description: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21216
CVE: CVE-2025-21254
Published: 2025-02-11
Description: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21254
CVE: CVE-2025-21259
Published: 2025-02-11
Description: Microsoft Outlook Spoofing Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21259
CVE: CVE-2025-21322
Published: 2025-02-11
Description: Microsoft PC Manager Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21322
CVE: CVE-2025-21337
Published: 2025-02-11
Description: Windows NTFS Elevation of Privilege Vulnerability
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21337
CVE: CVE-2025-21347
Published: 2025-02-11
Description: Windows Deployment Services Denial of Service Vulnerability
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21347
CVE: CVE-2025-21349
Published: 2025-02-11
Description: Windows Remote Desktop Configuration Service Tampering Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21349
CVE: CVE-2025-21350
Published: 2025-02-11
Description: Windows Kerberos Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21350
CVE: CVE-2025-21351
Published: 2025-02-11
Description: Windows Active Directory Domain Services API Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21351
CVE: CVE-2025-21352
Published: 2025-02-11
Description: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21352
CVE: CVE-2025-21358
Published: 2025-02-11
Description: Windows Core Messaging Elevation of Privileges Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21358
CVE: CVE-2025-21359
Published: 2025-02-11
Description: Windows Kernel Security Feature Bypass Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21359
CVE: CVE-2025-21367
Published: 2025-02-11
Description: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21367
CVE: CVE-2025-21368
Published: 2025-02-11
Description: Microsoft Digest Authentication Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21368
CVE: CVE-2025-21369
Published: 2025-02-11
Description: Microsoft Digest Authentication Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21369
CVE: CVE-2025-21371
Published: 2025-02-11
Description: Windows Telephony Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21371; https://www.vicarius.io/vsociety/posts/windows-telephony-service-remote-code-execution-vulnerability-detection-script; https://www.vicarius.io/vsociety/posts/windows-telephony-service-remote-code-execution-vulnerability-mitigation-script
CVE: CVE-2025-21373
Published: 2025-02-11
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21373
CVE: CVE-2025-21375
Published: 2025-02-11
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21375
CVE: CVE-2025-21376
Published: 2025-02-11
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-191, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21376
CVE: CVE-2025-21377
Published: 2025-02-11
Description: NTLM Hash Disclosure Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21377
CVE: CVE-2025-21379
Published: 2025-02-11
Description: DHCP Client Service Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21379
CVE: CVE-2025-21381
Published: 2025-02-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21381
CVE: CVE-2025-21383
Published: 2025-02-11
Description: Microsoft Excel Information Disclosure Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21383
CVE: CVE-2025-21386
Published: 2025-02-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21386
CVE: CVE-2025-21387
Published: 2025-02-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21387
CVE: CVE-2025-21390
Published: 2025-02-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21390
CVE: CVE-2025-21391
Published: 2025-02-11
Description: Windows Storage Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21391; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21391
CVE: CVE-2025-21392
Published: 2025-02-11
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21392
CVE: CVE-2025-21394
Published: 2025-02-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21394
CVE: CVE-2025-21397
Published: 2025-02-11
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21397