Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
31,416 matching · page 156/629Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2025-64893(opens NVD record) | High | 7.1 | DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Dec 9, 2025 |
| CVE-2025-64784(opens NVD record) | High | 7.1 | DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Dec 9, 2025 |
| CVE-2025-64783(opens NVD record) | High | 7.8 | DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Dec 9, 2025 |
| CVE-2025-64680(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-64679(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-64678(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | Dec 9, 2025 |
| CVE-2025-64673(opens NVD record) | High | 7.8 | Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-64672(opens NVD record) | High | 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Dec 9, 2025 |
| CVE-2025-64671(opens NVD record) | High | 8.4 | Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-64670(opens NVD record) | Medium | 6.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network. | Dec 9, 2025 |
| CVE-2025-64667(opens NVD record) | Medium | 5.3 | User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | Dec 9, 2025 |
| CVE-2025-64666(opens NVD record) | High | 7.5 | Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | Dec 9, 2025 |
| CVE-2025-64661(opens NVD record) | High | 7.8 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-64658(opens NVD record) | High | 7.5 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-64471(opens NVD record) | Medium | 4.9 | A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to use the hash in place of the password to authenticate via crafted HTTP/HTTPS requests | Dec 9, 2025 |
| CVE-2025-64447(opens NVD record) | High | 8.1 | A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to execute arbitrary operations on the system via crafted HTTP or HTTPS request via forged cookies, requiring prior knowledge of the FortiWeb serial number. | Dec 9, 2025 |
| CVE-2025-64156(opens NVD record) | High | 7.2 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all versions, FortiVoice 6.0 all versions may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests | Dec 9, 2025 |
| CVE-2025-64153(opens NVD record) | High | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request. | Dec 9, 2025 |
| CVE-2025-62631(opens NVD record) | Medium | 5.6 | An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's password change under particular conditions outside of the attacker's control | Dec 9, 2025 |
| CVE-2025-62573(opens NVD record) | High | 7.0 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62572(opens NVD record) | High | 7.8 | Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62571(opens NVD record) | High | 7.8 | Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62570(opens NVD record) | High | 7.1 | Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally. | Dec 9, 2025 |
| CVE-2025-62569(opens NVD record) | High | 7.0 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62567(opens NVD record) | Medium | 5.3 | Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network. | Dec 9, 2025 |
| CVE-2025-62565(opens NVD record) | High | 7.3 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62564(opens NVD record) | High | 7.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62563(opens NVD record) | High | 7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62562(opens NVD record) | High | 7.8 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62561(opens NVD record) | High | 7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62560(opens NVD record) | High | 7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62559(opens NVD record) | High | 7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62558(opens NVD record) | High | 7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62557(opens NVD record) | High | 8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62556(opens NVD record) | High | 7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62555(opens NVD record) | High | 7.0 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62554(opens NVD record) | High | 8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62553(opens NVD record) | High | 7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62552(opens NVD record) | High | 7.8 | Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally. | Dec 9, 2025 |
| CVE-2025-62550(opens NVD record) | High | 8.8 | Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network. | Dec 9, 2025 |
| CVE-2025-62549(opens NVD record) | High | 8.8 | Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | Dec 9, 2025 |
| CVE-2025-62474(opens NVD record) | High | 7.8 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62473(opens NVD record) | Medium | 6.5 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | Dec 9, 2025 |
| CVE-2025-62472(opens NVD record) | High | 7.8 | Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62470(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62469(opens NVD record) | High | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62468(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. | Dec 9, 2025 |
| CVE-2025-62467(opens NVD record) | High | 7.8 | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62466(opens NVD record) | High | 7.8 | Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | Dec 9, 2025 |
| CVE-2025-62465(opens NVD record) | Medium | 6.5 | Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally. | Dec 9, 2025 |