Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2025-54279

Animate versions 23.0.13, 24.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open ...

Affected Products : macos windows animate
Published: Oct. 15, 2025

Modified: Oct. 17, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-61804

Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi...

Affected Products : macos windows animate
Published: Oct. 15, 2025

Modified: Oct. 17, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-59225

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 excel_2016 office_2024 office_2021 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 16, 2025
7.8

HIGH

CVE-2025-59241

Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_11_25h2
Published: Oct. 14, 2025

Modified: Oct. 17, 2025
7.8

HIGH

CVE-2025-54545

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges....

Affected Products : danz_monitoring_fabric
Published: Oct. 29, 2025

Modified: Oct. 30, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-59255

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +2 more products
Published: Oct. 14, 2025

Modified: Oct. 17, 2025
7.8

HIGH

CVE-2025-58728

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 14, 2025
7.8

HIGH

CVE-2025-53768

Use after free in Xbox allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_10_1507 windows_11_23h2 windows_11_24h2 windows_11_25h2
Published: Oct. 14, 2025

Modified: Oct. 20, 2025
7.8

HIGH

CVE-2025-55697

Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022_23h2 windows_server_23h2 windows_server_2025
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-53150

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 +2 more products
Published: Oct. 14, 2025

Modified: Oct. 20, 2025
7.8

HIGH

CVE-2025-50175

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +3 more products
Published: Oct. 14, 2025

Modified: Oct. 16, 2025
7.8

HIGH

CVE-2025-59207

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +3 more products
Published: Oct. 14, 2025

Modified: Oct. 17, 2025
7.8

HIGH

CVE-2025-27070

Memory corruption while performing encryption and decryption commands....

Affected Products :
Published: Nov. 04, 2025

Modified: Nov. 04, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-36007

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script....

Affected Products : qradar_security_information_and_event_manager
Published: Oct. 27, 2025

Modified: Nov. 03, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-20735

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; ...

Affected Products :
Published: Nov. 04, 2025

Modified: Nov. 04, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-23347

NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information...

Affected Products : geforce tesla
Published: Oct. 23, 2025

Modified: Oct. 27, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-59277

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.8

HIGH

CVE-2025-59234

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps office_long_term_servicing_channel office_macos_2024 office_macos_2021 office_2016 office_2024 office_2021 office_2019
Published: Oct. 14, 2025

Modified: Oct. 28, 2025
7.8

HIGH

CVE-2025-10925

GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in t...

Affected Products : gimp
Published: Oct. 29, 2025

Modified: Nov. 04, 2025

Vuln Type: Memory Corruption

Showing 20 of 3895 Results

Browse by Apps

Latest CVE Feed

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable