Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.7

HIGH

CVE-2025-55698

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
5.5

MEDIUM

CVE-2025-55699

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
6.5

MEDIUM

CVE-2025-55700

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +11 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
0.0

NA

CVE-2025-63467

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request....

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Denial of Service
0.0

NA

CVE-2025-63466

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request....

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-60749

DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe....

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Misconfiguration
6.9

MEDIUM

CVE-2025-12554

Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5....

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Misconfiguration
10.0

CRITICAL

CVE-2025-12553

Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5....

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Misconfiguration
6.9

MEDIUM

CVE-2025-12552

Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5....

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Authentication
8.4

HIGH

CVE-2025-12509

On a client with an admin user, a Global_Shipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights....

Affected Products : brain2
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Authentication
8.4

HIGH

CVE-2025-12508

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality....

Affected Products : brain2
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Cryptography
8.8

HIGH

CVE-2025-12507

The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed....

Affected Products : _connect.brain
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Misconfiguration
8.3

HIGH

CVE-2025-12357

By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability...

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Misconfiguration
7.8

HIGH

CVE-2025-55701

Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +11 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
7.8

HIGH

CVE-2025-58714

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +11 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
8.8

HIGH

CVE-2025-58715

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
8.8

HIGH

CVE-2025-58716

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
6.5

MEDIUM

CVE-2025-58717

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +11 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
8.8

HIGH

CVE-2025-58718

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +15 more products
Published: Oct. 14, 2025

Modified: Oct. 31, 2025
8.3

HIGH

CVE-2025-64389

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol....

Affected Products :
Published: Oct. 31, 2025

Modified: Oct. 31, 2025

Vuln Type: Cryptography

Showing 20 of 3956 Results

Browse by Apps

Latest CVE Feed

7.7

5.5

6.5

0.0

0.0

7.8

6.9

10.0

6.9

8.4

8.4

8.8

8.3

7.8

7.8

8.8

8.8

6.5

8.8

8.3

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable