Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.8

HIGH

CVE-2025-29964

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +1 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-29966

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +11 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-29967

Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-29968

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Denial of Service
7.5

HIGH

CVE-2025-29969

Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Race Condition
7.8

HIGH

CVE-2025-29970

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2023-39496

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this ...

Affected Products : pdf-xchange_editor pdf-xchange_editor pdf-tools
Published: May. 03, 2024

Modified: May. 19, 2025
7.5

HIGH

CVE-2025-29971

Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network....

Affected Products : windows_11_22h2 windows_11_23h2 windows_11_24h2
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Denial of Service
7.0

HIGH

CVE-2025-29973

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally....

Affected Products : azure_file_sync
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2023-39497

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this...

Affected Products : pdf-xchange_editor pdf-xchange_editor pdf-tools
Published: May. 03, 2024

Modified: May. 19, 2025
5.7

MEDIUM

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Information Disclosure
7.8

HIGH

CVE-2025-29975

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally....

Affected Products : pc_manager
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-29978

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally....

Affected Products : 365_apps office_long_term_servicing_channel office_2024
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2023-39490

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this...

Affected Products : pdf-xchange_editor pdf-xchange_editor pdf-tools
Published: May. 03, 2024

Modified: May. 19, 2025
7.8

HIGH

CVE-2025-30381

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 excel_2016 office_2024 office_2021 +1 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-30379

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 excel_2016 office_2024 office_2021 +1 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
8.4

HIGH

CVE-2025-30377

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 office_2016 office_2024 office_2021 +1 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-30376

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 excel_2016 office_2024 office_2021 +1 more products
Published: May. 13, 2025

Modified: May. 19, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-4893

A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework...

Affected Products :
Published: May. 18, 2025

Modified: May. 19, 2025

Vuln Type: Path Traversal
6.5

MEDIUM

CVE-2025-30733

Vulnerability in the RDBMS Listener component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net t...

Affected Products : database_server rdbms_listener database_-_rdbms_listener
Published: Apr. 15, 2025

Modified: May. 19, 2025

Vuln Type: Authentication

Showing 20 of 292247 Results

1
...
1184
1185
1186
1187
1188
1189
1190
...
14613

Browse by Apps

Latest CVE Feed

8.8

8.8

8.8

6.5

7.5

7.8

7.8

7.5

7.0

7.8

5.7

7.8

7.8

7.8

7.8

7.8

8.4

7.8

6.5

6.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable