Posted on Tuesday June 10, 2025
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Posted on Tuesday June 10, 2025
Improper neutralization of input during web page generation ('cross-site scripting') in Nuance Digital Engagement Platform allows an authorized attacker to perform spoofing over a network.
Posted on Tuesday June 10, 2025
Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
Posted on Tuesday June 10, 2025
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.
Posted on Tuesday June 10, 2025
Untrusted pointer dereference in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Posted on Tuesday June 10, 2025
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.