Windows Administrator Protection Secure Feature Bypass Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

M365 Copilot Information Disclosure Vulnerability

Azure DevOps Information Disclosure Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

M365 Copilot Information Disclosure Vulnerability

Azure Logic Apps Elevation of Privilege Vulnerability

Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability

Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

Non-CA certificate accepted as intermediate issuer in public_key path validation

FFC-DH Peer Validation Uses Attacker-Supplied q

Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

NULL Pointer Dereference in CRMF EncryptedValue Decryption

Possible NULL Dereference in Password-Based CMS Decryption

NULL Pointer Dereference in QUIC Server Initial Packet Handling

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_dav_fs protected directory access

Jostle logic bypass degrades resolution performance