Latest CVE Feed
-
8.1
HIGHCVE-2025-24411
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability ... Read more
- Published: Feb. 11, 2025
- Modified: Apr. 16, 2025
- Vuln Type: Authorization
-
8.7
HIGHCVE-2025-24410
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form ... Read more
- Published: Feb. 11, 2025
- Modified: Apr. 16, 2025
- Vuln Type: Cross-Site Scripting
-
8.2
HIGHCVE-2025-24409
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass sec... Read more
- Published: Feb. 11, 2025
- Modified: Apr. 16, 2025
- Vuln Type: Authorization
-
6.5
MEDIUMCVE-2025-24408
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sensitiv... Read more
- Published: Feb. 11, 2025
- Modified: Feb. 27, 2025
- Vuln Type: Information Disclosure
-
7.1
HIGHCVE-2025-24407
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low privileged attacker could exploit this vulnerability t... Read more
- Published: Feb. 11, 2025
- Modified: Apr. 16, 2025
- Vuln Type: Authorization
-
7.5
HIGHCVE-2025-24406
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An unau... Read more
- Published: Feb. 11, 2025
- Modified: Apr. 17, 2025
- Vuln Type: Path Traversal
-
7.3
HIGHCVE-2025-24042
Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability... Read more
- Published: Feb. 11, 2025
- Modified: Jul. 02, 2025
- Vuln Type: Authentication
-
7.3
HIGHCVE-2025-24039
Visual Studio Code Elevation of Privilege Vulnerability... Read more
Affected Products : visual_studio_code- Published: Feb. 11, 2025
- Modified: Jul. 02, 2025
- Vuln Type: Authentication
-
7.0
HIGHCVE-2025-24036
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability... Read more
Affected Products : autoupdate- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Authentication
-
7.8
HIGHCVE-2025-21420
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability... Read more
Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +7 more products- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Authentication
-
7.1
HIGHCVE-2025-21419
Windows Setup Files Cleanup Elevation of Privilege Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +9 more products- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Authorization
-
7.8
HIGHCVE-2025-21418
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Actively Exploited
- Published: Feb. 11, 2025
- Modified: Feb. 12, 2025
- Vuln Type: Authorization
-
7.0
HIGHCVE-2025-21414
Windows Core Messaging Elevation of Privileges Vulnerability... Read more
Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows +5 more products- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Authorization
-
8.8
HIGHCVE-2025-21410
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability... Read more
- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
-
8.8
HIGHCVE-2025-21407
Windows Telephony Service Remote Code Execution Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Authentication
-
8.8
HIGHCVE-2025-21406
Windows Telephony Service Remote Code Execution Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Authentication
-
8.0
HIGH- Published: Feb. 11, 2025
- Modified: Feb. 14, 2025
- Vuln Type: Authentication
-
7.8
HIGH- Published: Feb. 11, 2025
- Modified: Jul. 01, 2025
-
7.8
HIGHCVE-2025-21394
Microsoft Excel Remote Code Execution Vulnerability... Read more
Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 excel_2016 office_2024 office_2021 +1 more products- Published: Feb. 11, 2025
- Modified: Jul. 01, 2025
-
7.8
HIGHCVE-2025-21392
Microsoft Office Remote Code Execution Vulnerability... Read more
- Published: Feb. 11, 2025
- Modified: Jul. 01, 2025
- Vuln Type: Memory Corruption