Latest CVE Feed
-
7.6
HIGHCVE-2025-3744
Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.... Read more
Affected Products : nomad- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Authorization
-
9.8
CRITICALCVE-2025-4660
A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-bas... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Authentication
-
7.8
HIGHCVE-2025-43557
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a ... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43556
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43555
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in ... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43547
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43546
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43545
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30330
Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-30329
Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. E... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Denial of Service
-
7.8
HIGHCVE-2025-30328
Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ... Read more
- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30326
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in... Read more
Affected Products : photoshop- Published: May. 13, 2025
- Modified: May. 15, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30325
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in ... Read more
- Published: May. 13, 2025
- Modified: May. 22, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30324
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac... Read more
- Published: May. 13, 2025
- Modified: May. 22, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30322
Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu... Read more
Affected Products : substance_3d_painter- Published: May. 13, 2025
- Modified: May. 19, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-27197
Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op... Read more
Affected Products : lightroom- Published: May. 13, 2025
- Modified: May. 22, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2023-31359
Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.... Read more
Affected Products : aim-t_manageability_api- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Authorization
-
7.8
HIGHCVE-2023-31358
A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.... Read more
Affected Products : aim-t_manageability_api- Published: May. 13, 2025
- Modified: May. 16, 2025
- Vuln Type: Misconfiguration
-
9.8
CRITICALCVE-2025-4658
Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also appl... Read more
- Published: May. 13, 2025
- Modified: May. 22, 2025
- Vuln Type: Authentication
-
6.1
MEDIUMCVE-2025-47280
Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email... Read more
Affected Products : umbraco_forms- Published: May. 13, 2025
- Modified: May. 22, 2025
- Vuln Type: Misconfiguration