CVE Vulnerability Advisory Database

[Affected Scope] Windows operating systems running Windows Remote Desktop services

[Impact] An authorized local attacker can elevate privileges to SYSTEM level, gaining full control over the target system

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and enforce Network Level Authentication (NLA)

[Affected Scope] Windows and Windows Server operating systems utilizing the Windows Remote Access Connection Manager (RasMan) service.

[Impact] An unauthorized local attacker can trigger a Null Pointer Dereference in the RasMan service, causing a local Denial of Service (DoS) by crashing the service or the entire system.

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service if remote access features are not required.

[Affected Scope] Desktop Window Manager (DWM) component within Microsoft Windows operating systems

[Impact] An authorized local attacker can exploit a type confusion vulnerability to elevate privileges to SYSTEM, enabling full system compromise

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor endpoint process creation events for anomalous DWM behavior

[Affected Scope] Microsoft Office Word and associated Office suites

[Impact] Unauthorized local attackers can bypass critical security controls, such as Protected View or macro execution blocks, to execute arbitrary code

[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted document files (.docx, .docm)

[Affected Scope] Applications and system components utilizing the MSHTML (Trident) engine within Microsoft Windows environments

[Impact] Unauthorized network attackers can bypass critical security boundaries and sandbox protections, potentially leading to remote code execution

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or implement registry-based workarounds to restrict MSHTML rendering

[Affected Scope] Windows Shell component across Microsoft Windows operating systems

[Impact] Unauthorized network attackers can bypass critical security boundaries, potentially leading to arbitrary code execution via user interaction

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict outbound SMB/WebDAV traffic

[Affected Scope] Ivanti Endpoint Manager (EPM) versions prior to 2024 SU5

[Impact] A remote unauthenticated attacker can bypass authentication to leak specific stored credential data, potentially leading to full infrastructure compromise

[Mitigation] Immediately upgrade Ivanti EPM to version 2024 SU5 or later, and restrict external access to the management console

[Affected Scope] Fortinet FortiOS versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, and all versions of 7.2, 7.0, and 6.4

[Impact] A remote unauthenticated attacker with prior filesystem-level access can bypass existing symbolic link persistency mitigations via crafted HTTP requests to expose sensitive information

[Mitigation] Immediately upgrade to the patched firmware versions recommended in the official Fortinet advisory (FG-IR-25-934)

[Affected Scope] BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA).

[Impact] Unauthenticated remote attackers can execute arbitrary operating system commands in the context of the 'site' user by sending specially crafted HTTP requests.

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to the management interface using IP whitelisting and WAF rules.

[Affected Scope] Fortinet FortiClientEMS version 7.4.4

[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges by sending crafted HTTP requests.

[Mitigation] Immediately apply the official vendor patches and restrict external access to the EMS management ports.

[Affected Scope] Notepad++ versions prior to 8.8.9 utilizing the WinGUp updater component.

[Impact] Attackers capable of intercepting or redirecting update traffic can bypass verification to deliver and execute arbitrary malicious installers under the user's privilege context.

[Mitigation] Immediately upgrade Notepad++ to version 8.8.9 or higher, or block updater outbound traffic as a temporary workaround.

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) affected versions

[Impact] Unauthenticated attackers can execute arbitrary code remotely, potentially leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to exposed management interfaces

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM)

[Impact] Unauthenticated remote attackers can inject and execute arbitrary code, leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces

[Affected Scope] SolarWinds Web Help Desk (WHD) versions prior to 2026.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with high privileges on the host machine by sending specially crafted serialized data

[Mitigation] Immediately upgrade SolarWinds Web Help Desk to version 2026.1 or higher, and restrict external network access to the service

[Affected Scope] All SolarWinds Web Help Desk (WHD) versions prior to 2026.1.

[Impact] Unauthenticated remote attackers can bypass internal security controls, gaining unauthorized access to restricted functionalities and sensitive data.

[Mitigation] Immediately upgrade to the latest secure version (2026.1 or higher) and restrict external access until patched.

[Affected Scope] FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, and FortiNAC-F devices with FortiCloud SSO authentication enabled

[Impact] An attacker with a valid FortiCloud account and a registered device can bypass authentication to log into other registered devices under different accounts, gaining full administrative control (CVSS 9.8, Active KEV)

[Mitigation] Immediately upgrade to the patched firmware versions or disable FortiCloud SSO administrator login on all affected devices

[Affected Scope] All Microsoft Office suites and local environments processing untrusted document inputs.

[Impact] Attackers can bypass local security decisions, leading to unauthorized macro execution and arbitrary code execution.

[Mitigation] Apply official Microsoft security patches immediately and enforce strict macro blocking policies for untrusted files.

[Affected Scope] SmarterTools SmarterMail software versions prior to Build 9511

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system via a malicious HTTP server, leading to complete system compromise

[Mitigation] Immediately upgrade SmarterMail to the latest stable version (Build 9511 or higher) and restrict access to administrative endpoints

[Affected Scope] Active deployments of Langflow utilizing the validate API endpoint.

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by exploiting untrusted resource inclusion.

[Mitigation] Immediately upgrade Langflow to the latest patched version and restrict external access to the validation endpoint.

[Affected Scope] All SmarterTools SmarterMail versions prior to build 9511

[Impact] Unauthenticated attackers can bypass authentication to reset system administrator passwords, gaining full administrative control and executing arbitrary OS commands with SYSTEM/root privileges

[Mitigation] Immediately upgrade SmarterMail to build 9511 or later, and restrict external access to administrative APIs until patched