Latest CVE Feed
-
8.2
HIGHCVE-2024-36292
Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.... Read more
Affected Products :- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Denial of Service
-
4.8
MEDIUMCVE-2024-31150
Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure via local access.... Read more
Affected Products :- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Information Disclosure
-
6.7
MEDIUMCVE-2024-31073
Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Authorization
-
6.1
MEDIUMCVE-2024-29222
Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via local access.... Read more
Affected Products :- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Denial of Service
-
5.7
MEDIUMCVE-2024-28956
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.... Read more
Affected Products :- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Information Disclosure
-
6.7
MEDIUMCVE-2024-28954
Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Authorization
-
5.7
MEDIUMCVE-2024-28036
Improper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to potentially enable denial of service via local access.... Read more
Affected Products :- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Denial of Service
-
9.8
CRITICALCVE-2025-45863
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.... Read more
- Published: May. 13, 2025
- Modified: May. 23, 2025
- Vuln Type: Memory Corruption
-
9.8
CRITICALCVE-2025-45865
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
9.8
CRITICALCVE-2025-45861
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
9.8
CRITICALCVE-2025-45746
In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this report because the service console is typically only ac... Read more
Affected Products : zkbio_cvsecurity- Published: May. 13, 2025
- Modified: May. 21, 2025
- Vuln Type: Authentication
-
7.6
HIGHCVE-2025-3744
Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.... Read more
Affected Products : nomad- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Authorization
-
9.8
CRITICALCVE-2025-4660
A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-bas... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Authentication
-
7.8
HIGHCVE-2025-43557
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a ... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43556
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43555
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in ... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43547
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43546
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43545
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30330
Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption