Microsoft Office Remote Code Execution Vulnerability

Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

Windows Shortcut Files Security Feature Bypass Vulnerability

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

Azure DevOps Server Elevation of Privilege Vulnerability

net-tools Stack-based Buffer Overflow vulnerability

GitHub: CVE-2025-46835 Git File Overwrite Vulnerability

Redis is vulnerable to DoS via specially crafted LUA scripts

Redis: Authenticated users can execute LUA scripts as a different user

Lua library commands may lead to integer overflow and potential RCE

Unexpected command execution in untrusted VCS repositories in cmd/go

Sensitive headers not cleared on cross-origin redirect in net/http

Erlang/OTP SSH Has Strict KEX Violations

Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this is disputed by the Supplier because abuse of the commands network protocol is not a violation of the Redis Security Model.

Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader

OPA server Data API HTTP path injection of Rego

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

GitHub: CVE-2025-46334 Git Malicious Shell Vulnerability