🛡️ CVE Intelligence Center

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a netw…

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate u…

A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8). U…

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could r…

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Dir…

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could re…

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent net…

Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted f…

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could…

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability that could result in a…

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a cr…