CVE Vulnerability Advisory Database

[Affected Scope] Microsoft Windows operating systems utilizing the Windows Fast FAT File System Driver (fastfat.sys)

[Impact] Local unauthorized attackers can execute arbitrary code with SYSTEM privileges by exploiting kernel-level memory corruption

[Mitigation] Apply the official Microsoft security updates immediately, or restrict auto-mounting of untrusted storage media and virtual disk images

[Affected Scope] All Windows operating system deployments utilizing the NTFS file system

[Impact] An unauthorized attacker with physical access can extract sensitive information written in plaintext within NTFS system log files

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and enforce BitLocker Full Disk Encryption (FDE)

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Win32k kernel subsystem

[Impact] An authorized local attacker can elevate privileges to SYSTEM level, gaining full control over the affected system

[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access

[Affected Scope] Active Directory environments and Windows operating systems utilizing the NTLM authentication protocol

[Impact] Unauthorized remote attackers can control file names or paths to perform network-based spoofing and credential relay attacks

[Mitigation] Apply the latest Microsoft cumulative security updates and restrict NTLM authentication traffic

[Affected Scope] FreeType versions 2.13.0 and below

[Impact] Heap buffer overflow during TrueType GX and variable font parsing, potentially leading to arbitrary code execution (RCE) with active in-the-wild exploitation detected

[Mitigation] Immediately upgrade FreeType to a non-vulnerable version (2.13.1 or newer)

[Affected Scope] Bare-metal servers and Baseboard Management Controller (BMC) devices utilizing AMI (American Megatrends International) SPx firmware.

[Impact] Unauthenticated remote attackers can bypass authentication via the Redfish Host Interface, leading to complete server takeover, data exfiltration, or permanent hardware destruction (bricking).

[Mitigation] Immediately apply the latest BMC firmware patches provided by your server OEM and restrict access to BMC management interfaces.

[Affected Scope] Apache Tomcat versions 11.0.0-M1 through 11.0.2, 10.1.0-M1 through 10.1.34, 9.0.0.M1 through 9.0.98, and EOL 8.5.0 through 8.5.100.

[Impact] Attackers can bypass path validation via internal dot path equivalence, allowing them to inject malicious content into sensitive files or trigger remote code execution (RCE) via session deserialization.

[Mitigation] Immediately upgrade to patched versions (11.0.3, 10.1.35, or 9.0.99) and ensure the Default Servlet's 'readonly' parameter is set to 'true'.

[Affected Scope] Edimax IC-7100 IP camera devices

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending specially crafted HTTP requests

[Mitigation] Apply official vendor patches immediately, or restrict management interface access from the public internet and isolate the affected devices

[Affected Scope] VMware ESXi, Workstation, and Fusion environments utilizing the Host-Guest File System (HGFS) for file sharing.

[Impact] A malicious actor with local administrative privileges on a guest VM can read out-of-bounds memory from the host's vmx process, potentially bypassing ASLR to facilitate hypervisor escape.

[Mitigation] Apply the official security patches provided by Broadcom, or disable the HGFS (Shared Folders) feature in the virtual machine configuration as a temporary workaround.

[Affected Scope] Virtual machines and environments running on VMware ESXi hypervisors where attackers hold privileges within the VMX process

[Impact] Escape of the hypervisor sandbox and potential host takeover via arbitrary kernel write from the guest OS

[Mitigation] Immediately apply the official security patches provided by Broadcom and restrict administrative access to the VMX process

[Affected Scope] VMware ESXi and Workstation products

[Impact] A malicious actor with local administrative privileges on a guest VM can execute arbitrary code within the host's VMX process, leading to a virtual machine escape

[Mitigation] Apply the latest security patches provided by Broadcom and restrict administrative access within guest virtual machines

[Affected Scope] NAKIVO Backup & Replication versions prior to 11.0.0.88174

[Impact] Unauthenticated remote attackers can exploit absolute path traversal to read arbitrary system files, potentially leading to enterprise-wide Remote Code Execution (RCE) due to cleartext credentials stored in PhysicalDiscovery.

[Mitigation] Immediately upgrade NAKIVO Backup & Replication to version 11.0.0.88174 or later and restrict external access.

[Affected Scope] XWiki Platform versions prior to 15.10.11, 16.4.1, and 16.5.0RC1

[Impact] Unauthenticated remote attackers can execute arbitrary Groovy code via the SolrSearch API, leading to complete compromise of the host system.

[Mitigation] Immediately upgrade to patched versions (15.10.11, 16.4.1, 16.5.0RC1 or later) or apply the recommended XML macro workaround.

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-24989

[Impact] An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially byp...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] PAN-OS firewalls with the management web interface enabled and accessible via the network (excluding Cloud NGFW and Prisma Access)

[Impact] Authenticated attackers can read sensitive system files on the PAN-OS filesystem that are readable by the 'nobody' user, potentially exposing configuration details

[Mitigation] Apply the latest PAN-OS security patches immediately and restrict management interface access to trusted internal IP addresses

[Affected Scope] Palo Alto Networks PAN-OS software management web interface (excluding Cloud NGFW and Prisma Access)

[Impact] Unauthenticated remote attackers with network access can bypass authentication on the management interface and invoke sensitive PHP scripts, severely compromising system integrity and confidentiality

[Mitigation] Immediately upgrade to the patched PAN-OS versions and restrict access to the management interface to trusted internal IP addresses only

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the WinSock Ancillary Function Driver (afd.sys)

[Impact] Local attackers can trigger kernel memory corruption (Heap-based Buffer Overflow) to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the Microsoft February 2025 Patch Tuesday cumulative updates and restrict unauthorized local execution privileges

[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing Windows Storage components

[Impact] Local attackers with low privileges can exploit symbolic link creation to overwrite critical system files, leading to arbitrary code execution with SYSTEM privileges

[Mitigation] Apply the Microsoft February 2025 security updates immediately and restrict local symbolic link creation privileges on unpatched systems

[Affected Scope] FortiOS versions 7.0.0 through 7.0.16, and FortiProxy versions 7.0.0 through 7.0.19, 7.2.0 through 7.2.12, with Security Fabric (CSF) enabled

[Impact] A remote unauthenticated attacker with knowledge of upstream and downstream device serial numbers can bypass authentication via crafted CSF proxy requests to gain full super-admin privileges on the downstream device

[Mitigation] Immediately upgrade FortiOS and FortiProxy to the patched versions, or disable the Security Fabric feature and restrict access to the CSF port as a temporary workaround

[Affected Scope] Wazuh server and cluster environments running versions 4.4.0 through 4.9.0

[Impact] Attackers with API access or compromised agents can execute arbitrary Python code on the Wazuh server by manipulating Distributed API (DAPI) parameters, leading to full system compromise

[Mitigation] Immediately upgrade Wazuh manager and cluster nodes to the patched version (v4.9.1 or higher) and restrict API access