Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Xen Project XenXen Security Advisory 490 v1 (CVE-2025-54518) - x86: CPU Opcode Cache corruption

Risk 72
Severity
7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

AMD: CVE-2025-54518 CPU OP Cache Corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2025-54518

Microsoft Windows Server Update Services (WSUS)Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Risk 63
Severity
7
Race Condition, Use After Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-26174

libpng LIBPNGLIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

Risk 52
Severity
7.1
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-64720

libpng LIBPNGLIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`

Risk 56
Severity
7.1
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Libpng has been updated to version 1.6.51, which contains fixes for security vulnerabilities including CVE-2025-65018 and CVE-2025-64720.

1 / 3
Source: GitLab
First published (updated )
CVE-2025-65018

SQLite SQLiteInteger Truncation on SQLite

Risk 79
Severity
7.2
Exploited
EPSS
0.05%
SQL Injection, Input Validation, Buffer Overflow, Race Condition, Double Free, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 183
Source: Apple
First published (updated )
CVE-2025-6965

Microsoft Windows 10 1607GDI+ Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-20846

Microsoft Windows Server 2022, 23H2 EditionRemote Desktop Protocol Server Remote Code Execution Vulnerability

Risk 75
Severity
8.1
Use After Free
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Remote Desktop Protocol Server Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43582

Microsoft Windows 10 1507Windows Kernel Elevation of Privilege Vulnerability

Risk 63
Severity
7
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43511

Microsoft Windows 10 1507Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43516

Microsoft Windows 10 1809Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43528

Microsoft Windows Server 2012 R2Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Risk 79
Severity
8.8
Input Validation
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43611

Microsoft Windows Server 2012 R2Winlogon Elevation of Privilege Vulnerability

Risk 73
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Winlogon Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43583

Microsoft Windows Server 2012 R2Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Risk 79
Severity
8.8
Input Validation
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43593

Microsoft Windows Server 2012 R2Remote Desktop Client Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Remote Desktop Client Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43599

Microsoft Windows Server 2012 R2Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Risk 79
Severity
8.8
Input Validation
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43592

Microsoft Windows Server 2012 R2Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RC:C

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43589

Microsoft Windows Server 2022, 23H2 EditionWindows Scripting Engine Security Feature Bypass Vulnerability

Risk 74
Severity
8.4
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Windows Scripting Engine Security Feature Bypass Vulnerability

First published (updated )
CVE-2024-43584

Microsoft Windows Server 2022, 23H2 EditionWindows Hyper-V Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Hyper-V Denial of Service Vulnerability

First published (updated )
CVE-2024-43575

Microsoft Windows Server 2022, 23H2 EditionMicrosoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

Risk 71
Severity
8.3
Use After Free
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43574

Microsoft Windows Server 2012 R2Microsoft Windows Management Console Remote Code Execution Vulnerability

Risk 86
Severity
7.8
Exploited
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Microsoft Management Console Remote Code Execution Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2024-43572

Microsoft Windows 11Windows Kernel Elevation of Privilege Vulnerability

Risk 63
Severity
7
Use After Free
AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43570

Microsoft Windows Server 2012Windows Hyper-V Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Hyper-V Denial of Service Vulnerability

First published (updated )
CVE-2024-43567

Microsoft Windows 10 1507Windows Network Address Translation (NAT) Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Network Address Translation (NAT) Denial of Service Vulnerability

First published (updated )
CVE-2024-43565

Microsoft Windows Server 2008Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43564

Microsoft Windows 10 1507Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43563

Microsoft Windows 11Windows Network Address Translation (NAT) Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Network Address Translation (NAT) Denial of Service Vulnerability

First published (updated )
CVE-2024-43562

Microsoft Windows 10 1507Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43560

Microsoft Windows 10 1507Windows Graphics Component Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Graphics Component Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43556

Microsoft Windows 11NT OS Kernel Elevation of Privilege Vulnerability

Risk 67
Severity
7.4
AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

NT OS Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43553

Microsoft Windows 11 22h2Windows Shell Remote Code Execution Vulnerability

Risk 64
Severity
7.3
Use After Free
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Shell Remote Code Execution Vulnerability

First published (updated )
CVE-2024-43552

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203