Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.0

HIGH

CVE-2025-62213

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_23h2 +6 more products
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
0.0

NA

CVE-2025-64404

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apac...

Affected Products :
Published: Nov. 12, 2025

Modified: Nov. 12, 2025

Vuln Type: Authorization
5.2

MEDIUM

CVE-2025-54983

A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls....

Affected Products :
Published: Nov. 12, 2025

Modified: Nov. 12, 2025

Vuln Type: Misconfiguration
8.0

HIGH

CVE-2025-62452

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_23h2 +6 more products
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
7.8

HIGH

CVE-2025-60720

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_23h2 +6 more products
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
7.0

HIGH

CVE-2025-60716

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
6.3

MEDIUM

CVE-2025-60723

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
7.8

HIGH

CVE-2025-62200

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

Affected Products : 365_apps excel_2016 office_2024 office_2021 office_2019
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
8.8

HIGH

CVE-2024-32011

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution...

Affected Products : spectrum_power_4
Published: Nov. 11, 2025

Modified: Nov. 12, 2025

Vuln Type: Authentication
8.7

HIGH

CVE-2025-62210

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network....

Affected Products : dynamics_365
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
7.8

HIGH

CVE-2025-60713

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2025
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
7.5

HIGH

CVE-2025-12633

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and ...

Affected Products :
Published: Nov. 12, 2025

Modified: Nov. 12, 2025

Vuln Type: Authorization
8.8

HIGH

CVE-2025-62222

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network....

Affected Products : visual_studio_code_copilot_chat_extension
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
4.3

MEDIUM

CVE-2025-12087

The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.22 via the 'awwlm_remove_added_wishlist_page' AJAX action due to missing validation on a user ...

Affected Products :
Published: Nov. 12, 2025

Modified: Nov. 12, 2025

Vuln Type: Authorization
7.0

HIGH

CVE-2025-60717

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
5.5

MEDIUM

CVE-2025-61844

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue ...

Affected Products :
Published: Nov. 11, 2025

Modified: Nov. 12, 2025

Vuln Type: Memory Corruption
8.7

HIGH

CVE-2025-13047

Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents....

Affected Products :
Published: Nov. 12, 2025

Modified: Nov. 12, 2025

Vuln Type: Injection
0.0

NA

CVE-2025-40164

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible code warnings Syzbot reported the following warning: BUG: using smp_processor_id() in preemptible [00000000] code: dhcpcd/2879 calle...

Affected Products :
Published: Nov. 12, 2025

Modified: Nov. 12, 2025

Vuln Type: Race Condition
7.8

HIGH

CVE-2025-60718

Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_11_25h2
Published: Nov. 11, 2025

Modified: Nov. 12, 2025
0.0

NA

CVE-2025-40115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At...

Affected Products :
Published: Nov. 12, 2025

Modified: Nov. 12, 2025

Vuln Type: Misconfiguration

Showing 20 of 4090 Results

Browse by Apps

Latest CVE Feed

7.0

0.0

5.2

8.0

7.8

7.0

6.3

7.8

8.8

8.7

7.8

7.5

8.8

4.3

7.0

5.5

8.7

0.0

7.8

0.0

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable