Total
6311 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-2013 | 1 Ashlar | 1 Cobalt | 2025-08-15 | N/A |
| Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CO files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25186. | ||||
| CVE-2025-53784 | 1 Microsoft | 7 365, 365 Apps, Office and 4 more | 2025-08-15 | 8.4 High |
| Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-53740 | 1 Microsoft | 10 365, 365 Apps, Office and 7 more | 2025-08-15 | 8.4 High |
| Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-53738 | 1 Microsoft | 10 365, 365 Apps, Office and 7 more | 2025-08-15 | 7.8 High |
| Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-53735 | 1 Microsoft | 11 365, 365 Apps, Excel and 8 more | 2025-08-15 | 7.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-53734 | 1 Microsoft | 8 365, 365 Apps, Office and 5 more | 2025-08-15 | 7.8 High |
| Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-53731 | 1 Microsoft | 10 365, 365 Apps, Office and 7 more | 2025-08-15 | 8.4 High |
| Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-53721 | 1 Microsoft | 12 Server, Windows, Windows 10 1809 and 9 more | 2025-08-15 | 7 High |
| Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53718 | 1 Microsoft | 12 Windows, Windows 10 1507, Windows 10 1607 and 9 more | 2025-08-15 | 7 High |
| Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53152 | 1 Microsoft | 13 Server, Windows, Windows 10 1507 and 10 more | 2025-08-15 | 7.8 High |
| Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. | ||||
| CVE-2025-53151 | 1 Microsoft | 12 Server, Windows, Windows 10 1809 and 9 more | 2025-08-15 | 7.8 High |
| Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53147 | 1 Microsoft | 12 Windows, Windows 10 1507, Windows 10 1607 and 9 more | 2025-08-15 | 7 High |
| Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53142 | 1 Microsoft | 11 Server, Windows, Windows 11 and 8 more | 2025-08-15 | 7 High |
| Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53140 | 1 Microsoft | 14 Windows, Windows 10, Windows 10 1507 and 11 more | 2025-08-15 | 7 High |
| Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53137 | 1 Microsoft | 12 Windows, Windows 10 1507, Windows 10 1607 and 9 more | 2025-08-15 | 7 High |
| Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53133 | 1 Microsoft | 6 Server, Windows, Windows 11 and 3 more | 2025-08-15 | 7.8 High |
| Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-53132 | 1 Microsoft | 12 Windows, Windows 10 1507, Windows 10 1607 and 9 more | 2025-08-15 | 8 High |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2025-50177 | 1 Microsoft | 14 Windows, Windows 10, Windows 10 1507 and 11 more | 2025-08-15 | 8.1 High |
| Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2025-50167 | 1 Microsoft | 20 Hyper-v, Windows, Windows 10 and 17 more | 2025-08-15 | 7 High |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-50159 | 1 Microsoft | 19 Windows, Windows 10, Windows 10 1507 and 16 more | 2025-08-15 | 7.3 High |
| Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally. | ||||