Chromium: CVE-2025-2783 Incorrect handle provided in unspecified circumstances in Mojo on Windows

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Elevation of Privilege Vulnerability

Microsoft System Center Elevation of Privilege Vulnerability

NTFS Information Disclosure Vulnerability

NTFS Elevation of Privilege Vulnerability

Active Directory Certificate Services Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Windows Security Zone Mapping Security Feature Bypass Vulnerability

Windows Power Dependency Coordinator Information Disclosure Vulnerability