CVE Vulnerability Advisory Database

[Affected Scope] Dell RecoverPoint for Virtual Machines versions prior to 6.0.3.1 HF1

[Impact] Unauthenticated remote attackers can leverage hardcoded credentials to gain unauthorized root-level access and establish persistence on the underlying operating system

[Mitigation] Immediately upgrade to version 6.0.3.1 HF1 or later, or apply strict network access controls

[Affected Scope] Google Chrome browser versions prior to 145.0.7632.75

[Impact] Remote attackers can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (145.0.7632.75 or higher)

[Affected Scope] Soliton FileZen deployments with the Antivirus Check Option enabled

[Impact] An authenticated attacker can execute arbitrary OS commands with elevated privileges by sending a specially crafted HTTP request

[Mitigation] Immediately apply the official vendor security patches, or temporarily disable the Antivirus Check Option and restrict network access

[Affected Scope] Apple devices running iOS before 26.3, iPadOS before 26.3, macOS Tahoe before 26.3, tvOS before 26.3, visionOS before 26.3, and watchOS before 26.3

[Impact] An attacker with local memory write capabilities can exploit this vulnerability to execute arbitrary code with elevated privileges, potentially compromising the entire system

[Mitigation] Apply the official software updates immediately to upgrade systems to version 26.3 or later

[Affected Scope] Windows operating systems running Windows Remote Desktop services

[Impact] An authorized local attacker can elevate privileges to SYSTEM level, gaining full control over the target system

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and enforce Network Level Authentication (NLA)

[Affected Scope] Windows and Windows Server operating systems utilizing the Windows Remote Access Connection Manager (RasMan) service.

[Impact] An unauthorized local attacker can trigger a Null Pointer Dereference in the RasMan service, causing a local Denial of Service (DoS) by crashing the service or the entire system.

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service if remote access features are not required.

[Affected Scope] Microsoft Office Word and associated Office suites

[Impact] Unauthorized local attackers can bypass critical security controls, such as Protected View or macro execution blocks, to execute arbitrary code

[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted document files (.docx, .docm)

[Affected Scope] Applications and system components utilizing the MSHTML (Trident) engine within Microsoft Windows environments

[Impact] Unauthorized network attackers can bypass critical security boundaries and sandbox protections, potentially leading to remote code execution

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or implement registry-based workarounds to restrict MSHTML rendering

[Affected Scope] BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA).

[Impact] Unauthenticated remote attackers can execute arbitrary operating system commands in the context of the 'site' user by sending specially crafted HTTP requests.

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to the management interface using IP whitelisting and WAF rules.

[Affected Scope] Notepad++ versions prior to 8.8.9 utilizing the WinGUp updater component.

[Impact] Attackers capable of intercepting or redirecting update traffic can bypass verification to deliver and execute arbitrary malicious installers under the user's privilege context.

[Mitigation] Immediately upgrade Notepad++ to version 8.8.9 or higher, or block updater outbound traffic as a temporary workaround.

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM)

[Impact] Unauthenticated remote attackers can inject and execute arbitrary code, leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces

[Affected Scope] SolarWinds Web Help Desk (WHD) versions prior to 2026.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with high privileges on the host machine by sending specially crafted serialized data

[Mitigation] Immediately upgrade SolarWinds Web Help Desk to version 2026.1 or higher, and restrict external network access to the service

[Affected Scope] All SolarWinds Web Help Desk (WHD) versions prior to 2026.1.

[Impact] Unauthenticated remote attackers can bypass internal security controls, gaining unauthorized access to restricted functionalities and sensitive data.

[Mitigation] Immediately upgrade to the latest secure version (2026.1 or higher) and restrict external access until patched.

[Affected Scope] FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, and FortiNAC-F devices with FortiCloud SSO authentication enabled

[Impact] An attacker with a valid FortiCloud account and a registered device can bypass authentication to log into other registered devices under different accounts, gaining full administrative control (CVSS 9.8, Active KEV)

[Mitigation] Immediately upgrade to the patched firmware versions or disable FortiCloud SSO administrator login on all affected devices

[Affected Scope] All Microsoft Office suites and local environments processing untrusted document inputs.

[Impact] Attackers can bypass local security decisions, leading to unauthorized macro execution and arbitrary code execution.

[Mitigation] Apply official Microsoft security patches immediately and enforce strict macro blocking policies for untrusted files.

[Affected Scope] SmarterTools SmarterMail software versions prior to Build 9511

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system via a malicious HTTP server, leading to complete system compromise

[Mitigation] Immediately upgrade SmarterMail to the latest stable version (Build 9511 or higher) and restrict access to administrative endpoints

[Affected Scope] Active deployments of Langflow utilizing the validate API endpoint.

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by exploiting untrusted resource inclusion.

[Mitigation] Immediately upgrade Langflow to the latest patched version and restrict external access to the validation endpoint.

[Affected Scope] All SmarterTools SmarterMail versions prior to build 9511

[Impact] Unauthenticated attackers can bypass authentication to reset system administrator passwords, gaining full administrative control and executing arbitrary OS commands with SYSTEM/root privileges

[Mitigation] Immediately upgrade SmarterMail to build 9511 or later, and restrict external access to administrative APIs until patched

[Affected Scope] Appsmith versions 1.94 and below with publicly accessible applications

[Impact] Unauthenticated attackers can execute unpublished (edit-mode) actions, leading to sensitive data exposure, unauthorized database queries, and side-effect behaviors

[Mitigation] Restrict public access to applications and implement request filtering on reverse proxies or WAFs to block unauthorized edit-mode execution requests

[Affected Scope] Self-managed Grist deployments running versions prior to 1.7.9 with the GRIST_SANDBOX_FLAVOR environment variable configured to pyodide

[Impact] A remote attacker can execute arbitrary system processes on the hosting server by tricking a user into opening a maliciously crafted spreadsheet

[Mitigation] Upgrade Grist to version 1.7.9 or higher, or immediately change the sandbox flavor configuration to gvisor to enforce kernel-level isolation