diff --git a/CVE-2019/CVE-2019-127xx/CVE-2019-12735.json b/CVE-2019/CVE-2019-127xx/CVE-2019-12735.json index cadbae9abd2..ef4bb4ba287 100644 --- a/CVE-2019/CVE-2019-127xx/CVE-2019-12735.json +++ b/CVE-2019/CVE-2019-127xx/CVE-2019-12735.json @@ -2,7 +2,7 @@ "id": "CVE-2019-12735", "sourceIdentifier": "cve@mitre.org", "published": "2019-06-05T14:29:11.387", - "lastModified": "2024-11-21T04:23:27.880", + "lastModified": "2025-11-11T17:15:34.740", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -201,11 +201,11 @@ "source": "cve@mitre.org" }, { - "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2BMDSHTF754TITC6AQJPCS5IRIDMMIM7/", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2BMDSHTF754TITC6AQJPCS5IRIDMMIM7/", "source": "cve@mitre.org" }, { - "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRIRBC2YRGKPAWVRMZS4SZTGGCVRVZPR/", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRIRBC2YRGKPAWVRMZS4SZTGGCVRVZPR/", "source": "cve@mitre.org" }, { @@ -225,7 +225,7 @@ "source": "cve@mitre.org" }, { - "url": "https://support.f5.com/csp/article/K93144355?utm_source=f5support&%3Butm_medium=RSS", + "url": "https://support.f5.com/csp/article/K93144355?utm_source=f5support&utm_medium=RSS", "source": "cve@mitre.org" }, { @@ -244,6 +244,10 @@ "url": "https://www.debian.org/security/2019/dsa-4487", "source": "cve@mitre.org" }, + { + "url": "https://www.exploit-db.com/exploits/46973", + "source": "cve@mitre.org" + }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00031.html", "source": "af854a3a-2127-422b-91ae-364da2661108" diff --git a/CVE-2020/CVE-2020-257xx/CVE-2020-25760.json b/CVE-2020/CVE-2020-257xx/CVE-2020-25760.json index d360d162d24..2c1d0258faf 100644 --- a/CVE-2020/CVE-2020-257xx/CVE-2020-25760.json +++ b/CVE-2020/CVE-2020-257xx/CVE-2020-25760.json @@ -2,7 +2,7 @@ "id": "CVE-2020-25760", "sourceIdentifier": "cve@mitre.org", "published": "2020-09-30T18:15:25.380", - "lastModified": "2024-11-21T05:18:41.610", + "lastModified": "2025-11-11T17:15:35.107", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -130,6 +130,10 @@ "VDB Entry" ] }, + { + "url": "https://www.exploit-db.com/exploits/48911", + "source": "cve@mitre.org" + }, { "url": "http://packetstormsecurity.com/files/159262/Visitor-Management-System-In-PHP-1.0-SQL-Injection.html", "source": "af854a3a-2127-422b-91ae-364da2661108", diff --git a/CVE-2020/CVE-2020-257xx/CVE-2020-25761.json b/CVE-2020/CVE-2020-257xx/CVE-2020-25761.json index 161d82ee407..f211763fdb7 100644 --- a/CVE-2020/CVE-2020-257xx/CVE-2020-25761.json +++ b/CVE-2020/CVE-2020-257xx/CVE-2020-25761.json @@ -2,7 +2,7 @@ "id": "CVE-2020-25761", "sourceIdentifier": "cve@mitre.org", "published": "2020-09-30T18:15:25.460", - "lastModified": "2024-11-21T05:18:41.820", + "lastModified": "2025-11-11T17:15:35.393", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -121,6 +121,10 @@ "VDB Entry" ] }, + { + "url": "https://www.exploit-db.com/exploits/48830", + "source": "cve@mitre.org" + }, { "url": "http://packetstormsecurity.com/files/159263/Visitor-Management-System-In-PHP-1.0-Cross-Site-Scripting.html", "source": "af854a3a-2127-422b-91ae-364da2661108", diff --git a/CVE-2021/CVE-2021-271xx/CVE-2021-27129.json b/CVE-2021/CVE-2021-271xx/CVE-2021-27129.json index ab26155d7ef..bbbeb8ee323 100644 --- a/CVE-2021/CVE-2021-271xx/CVE-2021-27129.json +++ b/CVE-2021/CVE-2021-271xx/CVE-2021-27129.json @@ -2,7 +2,7 @@ "id": "CVE-2021-27129", "sourceIdentifier": "cve@mitre.org", "published": "2021-04-15T12:15:13.123", - "lastModified": "2024-11-21T05:57:22.637", + "lastModified": "2025-11-11T18:15:33.590", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -103,6 +103,10 @@ "VDB Entry" ] }, + { + "url": "https://www.exploit-db.com/exploits/49470", + "source": "cve@mitre.org" + }, { "url": "https://packetstormsecurity.com/files/161080/CASAP-Automated-Enrollment-System-1.0-Cross-Site-Scripting.html", "source": "af854a3a-2127-422b-91ae-364da2661108", diff --git a/CVE-2023/CVE-2023-363xx/CVE-2023-36375.json b/CVE-2023/CVE-2023-363xx/CVE-2023-36375.json index 2fdf1a913eb..f0c1098fa4d 100644 --- a/CVE-2023/CVE-2023-363xx/CVE-2023-36375.json +++ b/CVE-2023/CVE-2023-363xx/CVE-2023-36375.json @@ -2,7 +2,7 @@ "id": "CVE-2023-36375", "sourceIdentifier": "cve@mitre.org", "published": "2023-07-10T17:15:09.263", - "lastModified": "2024-11-21T08:09:37.623", + "lastModified": "2025-11-11T18:15:33.763", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -66,12 +66,8 @@ ], "references": [ { - "url": "https://medium.com/%40ridheshgohil1092/cve-2023-36375-xss-on-hostel-management-system-d654e6df26bc", - "source": "cve@mitre.org", - "tags": [ - "Exploit", - "Third Party Advisory" - ] + "url": "https://medium.com/@ridheshgohil1092/cve-2023-36375-xss-on-hostel-management-system-d654e6df26bc", + "source": "cve@mitre.org" }, { "url": "https://packetstormsecurity.com", @@ -82,6 +78,10 @@ "VDB Entry" ] }, + { + "url": "https://www.exploit-db.com/exploits/50628", + "source": "cve@mitre.org" + }, { "url": "https://medium.com/%40ridheshgohil1092/cve-2023-36375-xss-on-hostel-management-system-d654e6df26bc", "source": "af854a3a-2127-422b-91ae-364da2661108", diff --git a/CVE-2023/CVE-2023-389xx/CVE-2023-38965.json b/CVE-2023/CVE-2023-389xx/CVE-2023-38965.json index cfed016b3d5..25882a5c276 100644 --- a/CVE-2023/CVE-2023-389xx/CVE-2023-38965.json +++ b/CVE-2023/CVE-2023-389xx/CVE-2023-38965.json @@ -2,7 +2,7 @@ "id": "CVE-2023-38965", "sourceIdentifier": "cve@mitre.org", "published": "2023-11-03T05:15:29.400", - "lastModified": "2024-11-21T08:14:32.650", + "lastModified": "2025-11-11T17:15:35.667", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -86,6 +86,10 @@ "Third Party Advisory" ] }, + { + "url": "https://www.exploit-db.com/exploits/51795", + "source": "cve@mitre.org" + }, { "url": "http://packetstormsecurity.com/files/175077/Lost-And-Found-Information-System-1.0-Insecure-Direct-Object-Reference.html", "source": "af854a3a-2127-422b-91ae-364da2661108", diff --git a/CVE-2023/CVE-2023-415xx/CVE-2023-41537.json b/CVE-2023/CVE-2023-415xx/CVE-2023-41537.json index 5f851a751a9..8a388bff715 100644 --- a/CVE-2023/CVE-2023-415xx/CVE-2023-41537.json +++ b/CVE-2023/CVE-2023-415xx/CVE-2023-41537.json @@ -2,7 +2,7 @@ "id": "CVE-2023-41537", "sourceIdentifier": "cve@mitre.org", "published": "2023-08-30T14:15:10.847", - "lastModified": "2024-11-21T08:21:15.730", + "lastModified": "2025-11-11T18:15:33.933", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -70,12 +70,8 @@ ], "references": [ { - "url": "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/Business-Directory-Script-Version%3A3.2", - "source": "cve@mitre.org", - "tags": [ - "Exploit", - "Third Party Advisory" - ] + "url": "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/Business-Directory-Script-Version-3.2", + "source": "cve@mitre.org" }, { "url": "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/Business-Directory-Script-Version%3A3.2", diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52355.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52355.json index 83536a1e530..1a0e2e5180f 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52355.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52355.json @@ -2,7 +2,7 @@ "id": "CVE-2023-52355", "sourceIdentifier": "secalert@redhat.com", "published": "2024-01-25T20:15:38.353", - "lastModified": "2024-11-21T08:39:38.020", + "lastModified": "2025-11-11T17:15:36.130", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -120,6 +120,10 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2025:20801", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2023-52355", "source": "secalert@redhat.com", diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52356.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52356.json index 70abc721be7..c8080af1d8d 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52356.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52356.json @@ -2,7 +2,7 @@ "id": "CVE-2023-52356", "sourceIdentifier": "secalert@redhat.com", "published": "2024-01-25T20:15:39.063", - "lastModified": "2025-11-03T21:16:02.937", + "lastModified": "2025-11-11T17:15:36.290", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -123,6 +123,10 @@ "url": "https://access.redhat.com/errata/RHSA-2024:5079", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20801", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2023-52356", "source": "secalert@redhat.com", diff --git a/CVE-2024/CVE-2024-334xx/CVE-2024-33485.json b/CVE-2024/CVE-2024-334xx/CVE-2024-33485.json index d7aaba196a7..7aa8c20baec 100644 --- a/CVE-2024/CVE-2024-334xx/CVE-2024-33485.json +++ b/CVE-2024/CVE-2024-334xx/CVE-2024-33485.json @@ -2,7 +2,7 @@ "id": "CVE-2024-33485", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-14T18:15:11.950", - "lastModified": "2024-11-21T09:17:00.733", + "lastModified": "2025-11-11T18:15:34.377", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -56,6 +56,10 @@ "url": "https://github.com/CveSecLook/cve/issues/17", "source": "cve@mitre.org" }, + { + "url": "https://www.exploit-db.com/exploits/49463", + "source": "cve@mitre.org" + }, { "url": "https://github.com/CveSecLook/cve/issues/17", "source": "af854a3a-2127-422b-91ae-364da2661108" diff --git a/CVE-2024/CVE-2024-457xx/CVE-2024-45777.json b/CVE-2024/CVE-2024-457xx/CVE-2024-45777.json index 122563222a1..ce86a8af8a6 100644 --- a/CVE-2024/CVE-2024-457xx/CVE-2024-45777.json +++ b/CVE-2024/CVE-2024-457xx/CVE-2024-45777.json @@ -2,8 +2,8 @@ "id": "CVE-2024-45777", "sourceIdentifier": "secalert@redhat.com", "published": "2025-02-19T18:15:23.210", - "lastModified": "2025-07-28T17:26:10.740", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-11T17:15:37.593", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -105,6 +105,10 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2025:20532", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-45777", "source": "secalert@redhat.com", @@ -116,8 +120,8 @@ "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2346343", "source": "secalert@redhat.com", "tags": [ - "Third Party Advisory", - "Issue Tracking" + "Issue Tracking", + "Third Party Advisory" ] } ] diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11953.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11953.json index c4fd9caeee8..dab3e01ac08 100644 --- a/CVE-2025/CVE-2025-119xx/CVE-2025-11953.json +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11953.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11953", "sourceIdentifier": "reefs@jfrog.com", "published": "2025-11-03T17:15:32.677", - "lastModified": "2025-11-04T15:41:31.450", + "lastModified": "2025-11-11T17:15:38.977", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -55,6 +55,14 @@ { "url": "https://jfrog.com/blog/cve-2025-11953-critical-react-native-community-cli-vulnerability", "source": "reefs@jfrog.com" + }, + { + "url": "https://x.com/SzymonRybczak/status/1986199665000566848", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://x.com/thymikee/status/1986770875954475375", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12940.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12940.json new file mode 100644 index 00000000000..ad9ffe0b581 --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12940.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-12940", + "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "published": "2025-11-11T17:15:39.090", + "lastModified": "2025-11-11T17:15:39.090", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610\nand WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6\nAccess Points). An user having access to the syslog server can read the logs containing these credentials.\u00a0\n\nThis issue affects WAX610: before 10.8.11.4; WAX610Y: before 10.8.11.4.\n\n\nDevices\nmanaged with Insight get automatic updates. If not, please check the firmware version\nand update to the latest. \n\n\n\n\n\nFixed in:\n\n\n\nWAX610 firmware\n11.8.0.10 or later.\n\n\n\nWAX610Y firmware\n11.8.0.10 or later." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber", + "baseScore": 0.5, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NO", + "Recovery": "USER", + "valueDensity": "DIFFUSE", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "AMBER" + } + } + ] + }, + "weaknesses": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-532" + } + ] + } + ], + "references": [ + { + "url": "https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + }, + { + "url": "https://www.netgear.com/support/product/wax610", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + }, + { + "url": "https://www.netgear.com/support/product/wax610y", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12942.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12942.json new file mode 100644 index 00000000000..b724be31b43 --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12942.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-12942", + "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "published": "2025-11-11T17:15:39.263", + "lastModified": "2025-11-11T18:15:34.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NO", + "Recovery": "USER", + "valueDensity": "DIFFUSE", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "AMBER" + } + } + ] + }, + "weaknesses": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + }, + { + "url": "https://www.netgear.com/support/product/r6260", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + }, + { + "url": "https://www.netgear.com/support/product/r6850", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12943.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12943.json new file mode 100644 index 00000000000..78a1bb18c51 --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12943.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-12943", + "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "published": "2025-11-11T17:15:39.410", + "lastModified": "2025-11-11T17:15:39.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper certificate\nvalidation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream\nAX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band\nWiFi 6E Router) allows attackers with the ability to intercept and\ntamper traffic destined to the device to execute arbitrary commands on the\ndevice.\n\nDevices\nwith automatic updates enabled may already have this patch applied. If not,\nplease check the firmware version and update to the\nlatest.\n\n\n\nFixed in:\n\n\n\nRAX30 firmware\n1.0.14.108 or later.\n\n\n\nRAXE300 firmware\n1.0.9.82 or later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber", + "baseScore": 5.2, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NO", + "Recovery": "USER", + "valueDensity": "DIFFUSE", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "AMBER" + } + } + ] + }, + "weaknesses": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + }, + { + "url": "https://www.netgear.com/support/product/rax30", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + }, + { + "url": "https://www.netgear.com/support/product/raxe300", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12944.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12944.json new file mode 100644 index 00000000000..db51673162e --- /dev/null +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12944.json @@ -0,0 +1,89 @@ +{ + "id": "CVE-2025-12944", + "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "published": "2025-11-11T17:15:39.543", + "lastModified": "2025-11-11T17:15:39.543", + "vulnStatus": "Received", + "cveTags": [ + { + "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "tags": [ + "unsupported-when-assigned" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation\nin NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with\ndirect network access to the device to potentially execute code on the device.\n\nPlease check the firmware version and update to the latest.\n\n\n\nFixed\nin:\n\n\n\n\u00a0DGN2200v4\nfirmware 1.0.0.132 or later" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:L/U:Amber", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NO", + "Recovery": "AUTOMATIC", + "valueDensity": "DIFFUSE", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "AMBER" + } + } + ] + }, + "weaknesses": [ + { + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + }, + { + "url": "https://www.netgear.com/support/product/dgn2200v4", + "source": "a2826606-91e7-4eb6-899e-8484bd4575d5" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13032.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13032.json new file mode 100644 index 00000000000..3e02667b029 --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13032.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-13032", + "sourceIdentifier": "security@nortonlifelock.com", + "published": "2025-11-11T17:15:39.700", + "lastModified": "2025-11-11T17:15:39.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3\u00a0 on windows allows local attacker to escalate privelages via pool overflow." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@nortonlifelock.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security@nortonlifelock.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-367" + } + ] + } + ], + "references": [ + { + "url": "https://www.gendigital.com/us/en/contact-us/security-advisories/", + "source": "security@nortonlifelock.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-200xx/CVE-2025-20010.json b/CVE-2025/CVE-2025-200xx/CVE-2025-20010.json new file mode 100644 index 00000000000..091a0b79d78 --- /dev/null +++ b/CVE-2025/CVE-2025-200xx/CVE-2025-20010.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-20010", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:39.833", + "lastModified": "2025-11-11T17:15:39.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1104" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-200xx/CVE-2025-20050.json b/CVE-2025/CVE-2025-200xx/CVE-2025-20050.json new file mode 100644 index 00000000000..b6c87972f8c --- /dev/null +++ b/CVE-2025/CVE-2025-200xx/CVE-2025-20050.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-20050", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:40.007", + "lastModified": "2025-11-11T17:15:40.007", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-200xx/CVE-2025-20056.json b/CVE-2025/CVE-2025-200xx/CVE-2025-20056.json new file mode 100644 index 00000000000..1a17473389a --- /dev/null +++ b/CVE-2025/CVE-2025-200xx/CVE-2025-20056.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-20056", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:40.170", + "lastModified": "2025-11-11T17:15:40.170", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01355.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-200xx/CVE-2025-20065.json b/CVE-2025/CVE-2025-200xx/CVE-2025-20065.json new file mode 100644 index 00000000000..9b4a6476bd7 --- /dev/null +++ b/CVE-2025/CVE-2025-200xx/CVE-2025-20065.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-20065", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:40.337", + "lastModified": "2025-11-11T17:15:40.337", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01303.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-206xx/CVE-2025-20614.json b/CVE-2025/CVE-2025-206xx/CVE-2025-20614.json new file mode 100644 index 00000000000..da0102c67d5 --- /dev/null +++ b/CVE-2025/CVE-2025-206xx/CVE-2025-20614.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-20614", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:40.493", + "lastModified": "2025-11-11T17:15:40.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.5, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-73" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-206xx/CVE-2025-20622.json b/CVE-2025/CVE-2025-206xx/CVE-2025-20622.json new file mode 100644 index 00000000000..e1a77822013 --- /dev/null +++ b/CVE-2025/CVE-2025-206xx/CVE-2025-20622.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-20622", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:40.720", + "lastModified": "2025-11-11T17:15:40.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before version 32.0.100.4023 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", + "baseScore": 3.8, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.0, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-226" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-223xx/CVE-2025-22391.json b/CVE-2025/CVE-2025-223xx/CVE-2025-22391.json new file mode 100644 index 00000000000..94baa982f0b --- /dev/null +++ b/CVE-2025/CVE-2025-223xx/CVE-2025-22391.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-22391", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:40.910", + "lastModified": "2025-11-11T17:15:40.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01327.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23357.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23357.json new file mode 100644 index 00000000000..638b652ba0b --- /dev/null +++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23357.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-23357", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-11T17:15:41.070", + "lastModified": "2025-11-11T17:15:41.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23357", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5712", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-23357", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23361.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23361.json new file mode 100644 index 00000000000..14a1b5b9445 --- /dev/null +++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23361.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-23361", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-11T17:15:41.260", + "lastModified": "2025-11-11T17:15:41.260", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23361", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5718", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-23361", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-242xx/CVE-2025-24299.json b/CVE-2025/CVE-2025-242xx/CVE-2025-24299.json new file mode 100644 index 00000000000..3a2f55a5a74 --- /dev/null +++ b/CVE-2025/CVE-2025-242xx/CVE-2025-24299.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24299", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:41.440", + "lastModified": "2025-11-11T17:15:41.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-243xx/CVE-2025-24307.json b/CVE-2025/CVE-2025-243xx/CVE-2025-24307.json new file mode 100644 index 00000000000..c26cfd7462e --- /dev/null +++ b/CVE-2025/CVE-2025-243xx/CVE-2025-24307.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24307", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:41.617", + "lastModified": "2025-11-11T17:15:41.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.3, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.5, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-243xx/CVE-2025-24314.json b/CVE-2025/CVE-2025-243xx/CVE-2025-24314.json new file mode 100644 index 00000000000..4e111cb285d --- /dev/null +++ b/CVE-2025/CVE-2025-243xx/CVE-2025-24314.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24314", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:41.880", + "lastModified": "2025-11-11T17:15:41.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.1, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 2.2, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.7, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-243xx/CVE-2025-24327.json b/CVE-2025/CVE-2025-243xx/CVE-2025-24327.json new file mode 100644 index 00000000000..2597d4bd9c1 --- /dev/null +++ b/CVE-2025/CVE-2025-243xx/CVE-2025-24327.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24327", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:42.053", + "lastModified": "2025-11-11T17:15:42.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-277" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01362.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-244xx/CVE-2025-24491.json b/CVE-2025/CVE-2025-244xx/CVE-2025-24491.json new file mode 100644 index 00000000000..60858c477a1 --- /dev/null +++ b/CVE-2025/CVE-2025-244xx/CVE-2025-24491.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24491", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:42.217", + "lastModified": "2025-11-11T17:15:42.217", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01377.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-245xx/CVE-2025-24512.json b/CVE-2025/CVE-2025-245xx/CVE-2025-24512.json new file mode 100644 index 00000000000..14d23ccf3d6 --- /dev/null +++ b/CVE-2025/CVE-2025-245xx/CVE-2025-24512.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24512", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:42.393", + "lastModified": "2025-11-11T17:15:42.393", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Authorized adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-245xx/CVE-2025-24516.json b/CVE-2025/CVE-2025-245xx/CVE-2025-24516.json new file mode 100644 index 00000000000..252bc524886 --- /dev/null +++ b/CVE-2025/CVE-2025-245xx/CVE-2025-24516.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24516", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:42.563", + "lastModified": "2025-11-11T17:15:42.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-245xx/CVE-2025-24519.json b/CVE-2025/CVE-2025-245xx/CVE-2025-24519.json new file mode 100644 index 00000000000..71d0758639a --- /dev/null +++ b/CVE-2025/CVE-2025-245xx/CVE-2025-24519.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24519", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:42.740", + "lastModified": "2025-11-11T17:15:42.740", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.0, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24834.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24834.json new file mode 100644 index 00000000000..4a6f153b30e --- /dev/null +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24834.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24834", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:42.920", + "lastModified": "2025-11-11T17:15:42.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.0, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-693" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24838.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24838.json new file mode 100644 index 00000000000..3671d3c0301 --- /dev/null +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24838.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24838", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:43.090", + "lastModified": "2025-11-11T17:15:43.090", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24842.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24842.json new file mode 100644 index 00000000000..86abea704e2 --- /dev/null +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24842.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24842", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:43.250", + "lastModified": "2025-11-11T17:15:43.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01360.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24847.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24847.json new file mode 100644 index 00000000000..b37f53bc2e9 --- /dev/null +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24847.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24847", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:43.420", + "lastModified": "2025-11-11T17:15:43.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 4.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24848.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24848.json new file mode 100644 index 00000000000..6d85e9423d5 --- /dev/null +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24848.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24848", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:43.577", + "lastModified": "2025-11-11T17:15:43.577", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.3, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-693" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24862.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24862.json new file mode 100644 index 00000000000..f611bb41460 --- /dev/null +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24862.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24862", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:43.740", + "lastModified": "2025-11-11T17:15:43.740", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.5, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24863.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24863.json new file mode 100644 index 00000000000..6e6e15af316 --- /dev/null +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24863.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24863", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:43.913", + "lastModified": "2025-11-11T17:15:43.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-249xx/CVE-2025-24918.json b/CVE-2025/CVE-2025-249xx/CVE-2025-24918.json new file mode 100644 index 00000000000..cd61a4a4177 --- /dev/null +++ b/CVE-2025/CVE-2025-249xx/CVE-2025-24918.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-24918", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:44.070", + "lastModified": "2025-11-11T17:15:44.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software and Intel(R) Server Firmware Update Utility software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-59" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01400.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-250xx/CVE-2025-25059.json b/CVE-2025/CVE-2025-250xx/CVE-2025-25059.json new file mode 100644 index 00000000000..e0f597ad494 --- /dev/null +++ b/CVE-2025/CVE-2025-250xx/CVE-2025-25059.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-25059", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:44.230", + "lastModified": "2025-11-11T17:15:44.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01331.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-252xx/CVE-2025-25216.json b/CVE-2025/CVE-2025-252xx/CVE-2025-25216.json new file mode 100644 index 00000000000..6afbd2c9551 --- /dev/null +++ b/CVE-2025/CVE-2025-252xx/CVE-2025-25216.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-25216", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:44.393", + "lastModified": "2025-11-11T17:15:44.393", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01356.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-264xx/CVE-2025-26402.json b/CVE-2025/CVE-2025-264xx/CVE-2025-26402.json new file mode 100644 index 00000000000..91e8d1750bd --- /dev/null +++ b/CVE-2025/CVE-2025-264xx/CVE-2025-26402.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-26402", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:44.570", + "lastModified": "2025-11-11T17:15:44.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-693" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-264xx/CVE-2025-26405.json b/CVE-2025/CVE-2025-264xx/CVE-2025-26405.json new file mode 100644 index 00000000000..a6d8ab54ee2 --- /dev/null +++ b/CVE-2025/CVE-2025-264xx/CVE-2025-26405.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-26405", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:44.733", + "lastModified": "2025-11-11T17:15:44.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.5, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-913" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-266xx/CVE-2025-26694.json b/CVE-2025/CVE-2025-266xx/CVE-2025-26694.json new file mode 100644 index 00000000000..5c691c722d2 --- /dev/null +++ b/CVE-2025/CVE-2025-266xx/CVE-2025-26694.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-26694", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:44.900", + "lastModified": "2025-11-11T17:15:44.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-272xx/CVE-2025-27246.json b/CVE-2025/CVE-2025-272xx/CVE-2025-27246.json new file mode 100644 index 00000000000..52598a5883c --- /dev/null +++ b/CVE-2025/CVE-2025-272xx/CVE-2025-27246.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-27246", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:45.063", + "lastModified": "2025-11-11T17:15:45.063", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-272xx/CVE-2025-27249.json b/CVE-2025/CVE-2025-272xx/CVE-2025-27249.json new file mode 100644 index 00000000000..73a9857c188 --- /dev/null +++ b/CVE-2025/CVE-2025-272xx/CVE-2025-27249.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-27249", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:45.230", + "lastModified": "2025-11-11T17:15:45.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01374.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-277xx/CVE-2025-27710.json b/CVE-2025/CVE-2025-277xx/CVE-2025-27710.json new file mode 100644 index 00000000000..9516861b56d --- /dev/null +++ b/CVE-2025/CVE-2025-277xx/CVE-2025-27710.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-27710", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:45.427", + "lastModified": "2025-11-11T17:15:45.427", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.0, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-277xx/CVE-2025-27711.json b/CVE-2025/CVE-2025-277xx/CVE-2025-27711.json new file mode 100644 index 00000000000..830473e4813 --- /dev/null +++ b/CVE-2025/CVE-2025-277xx/CVE-2025-27711.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-27711", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:45.600", + "lastModified": "2025-11-11T17:15:45.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01331.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-277xx/CVE-2025-27712.json b/CVE-2025/CVE-2025-277xx/CVE-2025-27712.json new file mode 100644 index 00000000000..9a27e378dfb --- /dev/null +++ b/CVE-2025/CVE-2025-277xx/CVE-2025-27712.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-27712", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:45.770", + "lastModified": "2025-11-11T17:15:45.770", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.5, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-707" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01365.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-277xx/CVE-2025-27713.json b/CVE-2025/CVE-2025-277xx/CVE-2025-27713.json new file mode 100644 index 00000000000..4128f346ebb --- /dev/null +++ b/CVE-2025/CVE-2025-277xx/CVE-2025-27713.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-27713", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:45.940", + "lastModified": "2025-11-11T17:15:45.940", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-277xx/CVE-2025-27725.json b/CVE-2025/CVE-2025-277xx/CVE-2025-27725.json new file mode 100644 index 00000000000..e2c867cf280 --- /dev/null +++ b/CVE-2025/CVE-2025-277xx/CVE-2025-27725.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-27725", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:46.107", + "lastModified": "2025-11-11T17:15:46.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Time-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.1, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-367" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01388.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-301xx/CVE-2025-30182.json b/CVE-2025/CVE-2025-301xx/CVE-2025-30182.json new file mode 100644 index 00000000000..4cecffb8e6d --- /dev/null +++ b/CVE-2025/CVE-2025-301xx/CVE-2025-30182.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-30182", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:46.400", + "lastModified": "2025-11-11T17:15:46.400", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01382.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-301xx/CVE-2025-30185.json b/CVE-2025/CVE-2025-301xx/CVE-2025-30185.json new file mode 100644 index 00000000000..066d74d73e9 --- /dev/null +++ b/CVE-2025/CVE-2025-301xx/CVE-2025-30185.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-30185", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:46.597", + "lastModified": "2025-11-11T17:15:46.597", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a denial of service and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (high) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H", + "baseScore": 7.9, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.5, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-489" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01378.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-302xx/CVE-2025-30255.json b/CVE-2025/CVE-2025-302xx/CVE-2025-30255.json new file mode 100644 index 00000000000..55931e095f8 --- /dev/null +++ b/CVE-2025/CVE-2025-302xx/CVE-2025-30255.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-30255", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:46.830", + "lastModified": "2025-11-11T17:15:46.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.3, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-303xx/CVE-2025-30398.json b/CVE-2025/CVE-2025-303xx/CVE-2025-30398.json new file mode 100644 index 00000000000..1c1e4014b59 --- /dev/null +++ b/CVE-2025/CVE-2025-303xx/CVE-2025-30398.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-30398", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:35.107", + "lastModified": "2025-11-11T18:15:35.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-305xx/CVE-2025-30506.json b/CVE-2025/CVE-2025-305xx/CVE-2025-30506.json new file mode 100644 index 00000000000..e05e2c2e75a --- /dev/null +++ b/CVE-2025/CVE-2025-305xx/CVE-2025-30506.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-30506", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:47.097", + "lastModified": "2025-11-11T17:15:47.097", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01361.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-305xx/CVE-2025-30509.json b/CVE-2025/CVE-2025-305xx/CVE-2025-30509.json new file mode 100644 index 00000000000..adf2919b800 --- /dev/null +++ b/CVE-2025/CVE-2025-305xx/CVE-2025-30509.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-30509", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:47.267", + "lastModified": "2025-11-11T17:15:47.267", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", + "baseScore": 3.8, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.0, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-305xx/CVE-2025-30518.json b/CVE-2025/CVE-2025-305xx/CVE-2025-30518.json new file mode 100644 index 00000000000..aac325725fb --- /dev/null +++ b/CVE-2025/CVE-2025-305xx/CVE-2025-30518.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-30518", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:47.433", + "lastModified": "2025-11-11T17:15:47.433", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect default permissions for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01392.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-311xx/CVE-2025-31146.json b/CVE-2025/CVE-2025-311xx/CVE-2025-31146.json new file mode 100644 index 00000000000..63caaa23aa6 --- /dev/null +++ b/CVE-2025/CVE-2025-311xx/CVE-2025-31146.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-31146", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:47.587", + "lastModified": "2025-11-11T17:15:47.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Time-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.7, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-367" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01376.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-316xx/CVE-2025-31645.json b/CVE-2025/CVE-2025-316xx/CVE-2025-31645.json new file mode 100644 index 00000000000..2fa4bc45edf --- /dev/null +++ b/CVE-2025/CVE-2025-316xx/CVE-2025-31645.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-31645", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:47.757", + "lastModified": "2025-11-11T17:15:47.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01380.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-316xx/CVE-2025-31647.json b/CVE-2025/CVE-2025-316xx/CVE-2025-31647.json new file mode 100644 index 00000000000..0b455abea7f --- /dev/null +++ b/CVE-2025/CVE-2025-316xx/CVE-2025-31647.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-31647", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:47.917", + "lastModified": "2025-11-11T17:15:47.917", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01356.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31931.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31931.json new file mode 100644 index 00000000000..c570daae1bd --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31931.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-31931", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:48.073", + "lastModified": "2025-11-11T17:15:48.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for the Instrumentation and Tracing Technology API (ITT API) software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01337.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31937.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31937.json new file mode 100644 index 00000000000..0624cb70f35 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31937.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-31937", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:48.243", + "lastModified": "2025-11-11T17:15:48.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31940.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31940.json new file mode 100644 index 00000000000..502e4176113 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31940.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-31940", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:48.413", + "lastModified": "2025-11-11T17:15:48.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect default permissions for some Intel(R) Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01375.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31948.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31948.json new file mode 100644 index 00000000000..b8ed682b2b7 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31948.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-31948", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:48.583", + "lastModified": "2025-11-11T17:15:48.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01366.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-320xx/CVE-2025-32001.json b/CVE-2025/CVE-2025-320xx/CVE-2025-32001.json new file mode 100644 index 00000000000..c9e31ebaec2 --- /dev/null +++ b/CVE-2025/CVE-2025-320xx/CVE-2025-32001.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32001", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:48.743", + "lastModified": "2025-11-11T17:15:48.743", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-320xx/CVE-2025-32037.json b/CVE-2025/CVE-2025-320xx/CVE-2025-32037.json new file mode 100644 index 00000000000..4851b9f1b01 --- /dev/null +++ b/CVE-2025/CVE-2025-320xx/CVE-2025-32037.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32037", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:48.907", + "lastModified": "2025-11-11T17:15:48.907", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper access control for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow a denial of service. Network adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "ADJACENT", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 0.5, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01392.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-320xx/CVE-2025-32038.json b/CVE-2025/CVE-2025-320xx/CVE-2025-32038.json new file mode 100644 index 00000000000..44574a47577 --- /dev/null +++ b/CVE-2025/CVE-2025-320xx/CVE-2025-32038.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32038", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:49.073", + "lastModified": "2025-11-11T17:15:49.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software before version 2025.0.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01364.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-320xx/CVE-2025-32088.json b/CVE-2025/CVE-2025-320xx/CVE-2025-32088.json new file mode 100644 index 00000000000..391dab813a1 --- /dev/null +++ b/CVE-2025/CVE-2025-320xx/CVE-2025-32088.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32088", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:49.240", + "lastModified": "2025-11-11T17:15:49.240", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-754" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-320xx/CVE-2025-32091.json b/CVE-2025/CVE-2025-320xx/CVE-2025-32091.json new file mode 100644 index 00000000000..5959b3f9699 --- /dev/null +++ b/CVE-2025/CVE-2025-320xx/CVE-2025-32091.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32091", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:49.407", + "lastModified": "2025-11-11T17:15:49.407", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.5, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01356.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-324xx/CVE-2025-32446.json b/CVE-2025/CVE-2025-324xx/CVE-2025-32446.json new file mode 100644 index 00000000000..aca3c880e17 --- /dev/null +++ b/CVE-2025/CVE-2025-324xx/CVE-2025-32446.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32446", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:49.563", + "lastModified": "2025-11-11T17:15:49.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.0, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-324xx/CVE-2025-32449.json b/CVE-2025/CVE-2025-324xx/CVE-2025-32449.json new file mode 100644 index 00000000000..4ea64c75b19 --- /dev/null +++ b/CVE-2025/CVE-2025-324xx/CVE-2025-32449.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32449", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:49.723", + "lastModified": "2025-11-11T17:15:49.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unquoted search path for some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-428" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01394.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-327xx/CVE-2025-32732.json b/CVE-2025/CVE-2025-327xx/CVE-2025-32732.json new file mode 100644 index 00000000000..36468233b61 --- /dev/null +++ b/CVE-2025/CVE-2025-327xx/CVE-2025-32732.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-32732", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:49.890", + "lastModified": "2025-11-11T17:15:49.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", + "baseScore": 6.6, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33000.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33000.json new file mode 100644 index 00000000000..e30ffe216d6 --- /dev/null +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33000.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-33000", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:50.057", + "lastModified": "2025-11-11T17:15:50.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33029.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33029.json new file mode 100644 index 00000000000..18ace411179 --- /dev/null +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33029.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-33029", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:50.217", + "lastModified": "2025-11-11T17:15:50.217", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.3, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-331xx/CVE-2025-33178.json b/CVE-2025/CVE-2025-331xx/CVE-2025-33178.json new file mode 100644 index 00000000000..3808e7ac762 --- /dev/null +++ b/CVE-2025/CVE-2025-331xx/CVE-2025-33178.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-33178", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-11T17:15:50.370", + "lastModified": "2025-11-11T17:15:50.370", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33178", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5718", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-33178", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-331xx/CVE-2025-33185.json b/CVE-2025/CVE-2025-331xx/CVE-2025-33185.json new file mode 100644 index 00000000000..4264b0cc9df --- /dev/null +++ b/CVE-2025/CVE-2025-331xx/CVE-2025-33185.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-33185", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-11T17:15:50.530", + "lastModified": "2025-11-11T17:15:50.530", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure.\u00a0 A successful exploit of this vulnerability may lead to information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33185", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5724", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-33185", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-331xx/CVE-2025-33186.json b/CVE-2025/CVE-2025-331xx/CVE-2025-33186.json new file mode 100644 index 00000000000..556aa124c53 --- /dev/null +++ b/CVE-2025/CVE-2025-331xx/CVE-2025-33186.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-33186", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-11T17:15:50.687", + "lastModified": "2025-11-11T17:15:50.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-798" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33186", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5724", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-33186", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-332xx/CVE-2025-33202.json b/CVE-2025/CVE-2025-332xx/CVE-2025-33202.json new file mode 100644 index 00000000000..8585abc5de2 --- /dev/null +++ b/CVE-2025/CVE-2025-332xx/CVE-2025-33202.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-33202", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-11-11T17:15:50.860", + "lastModified": "2025-11-11T17:15:50.860", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33202", + "source": "psirt@nvidia.com" + }, + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5723", + "source": "psirt@nvidia.com" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-33202", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-359xx/CVE-2025-35963.json b/CVE-2025/CVE-2025-359xx/CVE-2025-35963.json new file mode 100644 index 00000000000..398837ea234 --- /dev/null +++ b/CVE-2025/CVE-2025-359xx/CVE-2025-35963.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-35963", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:51.020", + "lastModified": "2025-11-11T17:15:51.020", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.3, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-691" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-359xx/CVE-2025-35967.json b/CVE-2025/CVE-2025-359xx/CVE-2025-35967.json new file mode 100644 index 00000000000..e16c0d9bfd7 --- /dev/null +++ b/CVE-2025/CVE-2025-359xx/CVE-2025-35967.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-35967", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:51.187", + "lastModified": "2025-11-11T17:15:51.187", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-359xx/CVE-2025-35968.json b/CVE-2025/CVE-2025-359xx/CVE-2025-35968.json new file mode 100644 index 00000000000..23a013832bc --- /dev/null +++ b/CVE-2025/CVE-2025-359xx/CVE-2025-35968.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-35968", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:51.357", + "lastModified": "2025-11-11T17:15:51.357", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.5, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-693" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01395.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-359xx/CVE-2025-35971.json b/CVE-2025/CVE-2025-359xx/CVE-2025-35971.json new file mode 100644 index 00000000000..1e5e9e4fa4a --- /dev/null +++ b/CVE-2025/CVE-2025-359xx/CVE-2025-35971.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-35971", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:51.520", + "lastModified": "2025-11-11T17:15:51.520", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.3, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-359xx/CVE-2025-35972.json b/CVE-2025/CVE-2025-359xx/CVE-2025-35972.json new file mode 100644 index 00000000000..c23449e19e4 --- /dev/null +++ b/CVE-2025/CVE-2025-359xx/CVE-2025-35972.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-35972", + "sourceIdentifier": "secure@intel.com", + "published": "2025-11-11T17:15:51.700", + "lastModified": "2025-11-11T17:15:51.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "secure@intel.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@intel.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01386.html", + "source": "secure@intel.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-430xx/CVE-2025-43079.json b/CVE-2025/CVE-2025-430xx/CVE-2025-43079.json index ec1a98152e2..764e84fa5b7 100644 --- a/CVE-2025/CVE-2025-430xx/CVE-2025-43079.json +++ b/CVE-2025/CVE-2025-430xx/CVE-2025-43079.json @@ -2,13 +2,13 @@ "id": "CVE-2025-43079", "sourceIdentifier": "bugreport@qualys.com", "published": "2025-11-10T18:16:06.420", - "lastModified": "2025-11-10T18:16:06.420", + "lastModified": "2025-11-11T18:15:35.277", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to MacOS and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges (e.g., via sudo) in an environment where $PATH has been manipulated, an attacker with root/sudo privileges could cause malicious executables to be run in place of the intended system binaries. This behavior can be leveraged for local privilege escalation and arbitrary command execution under elevated privileges." + "value": "The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges (e.g., via sudo) in an environment where $PATH has been manipulated, an attacker with root/sudo privileges could cause malicious executables to be run in place of the intended system binaries. This behavior can be leveraged for local privilege escalation and arbitrary command execution under elevated privileges." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-471xx/CVE-2025-47179.json b/CVE-2025/CVE-2025-471xx/CVE-2025-47179.json new file mode 100644 index 00000000000..9e546aaaf8d --- /dev/null +++ b/CVE-2025/CVE-2025-471xx/CVE-2025-47179.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47179", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:35.397", + "lastModified": "2025-11-11T18:15:35.397", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47179", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-592xx/CVE-2025-59240.json b/CVE-2025/CVE-2025-592xx/CVE-2025-59240.json new file mode 100644 index 00000000000..af087afccbd --- /dev/null +++ b/CVE-2025/CVE-2025-592xx/CVE-2025-59240.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59240", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:35.563", + "lastModified": "2025-11-11T18:15:35.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59240", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59499.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59499.json new file mode 100644 index 00000000000..a0bf2b16ab6 --- /dev/null +++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59499.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59499", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:35.733", + "lastModified": "2025-11-11T18:15:35.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59499", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59504.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59504.json new file mode 100644 index 00000000000..62a83cb6e2b --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59504.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59504", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:35.900", + "lastModified": "2025-11-11T18:15:35.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.5, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59504", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59505.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59505.json new file mode 100644 index 00000000000..8a740ca021c --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59505.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59505", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:36.060", + "lastModified": "2025-11-11T18:15:36.060", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59505", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59506.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59506.json new file mode 100644 index 00000000000..d9713103263 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59506.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59506", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:36.230", + "lastModified": "2025-11-11T18:15:36.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59506", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59507.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59507.json new file mode 100644 index 00000000000..f072105637d --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59507.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59507", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:36.403", + "lastModified": "2025-11-11T18:15:36.403", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59507", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59508.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59508.json new file mode 100644 index 00000000000..931a603ca00 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59508.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59508", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:36.570", + "lastModified": "2025-11-11T18:15:36.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59508", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59509.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59509.json new file mode 100644 index 00000000000..d1f904280f9 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59509.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59509", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:36.737", + "lastModified": "2025-11-11T18:15:36.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59509", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59510.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59510.json new file mode 100644 index 00000000000..5c6a8224d42 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59510.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59510", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:36.900", + "lastModified": "2025-11-11T18:15:36.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-59" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59510", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59511.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59511.json new file mode 100644 index 00000000000..400816128c2 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59511.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59511", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:37.067", + "lastModified": "2025-11-11T18:15:37.067", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-73" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59511", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59512.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59512.json new file mode 100644 index 00000000000..bacfc0a2cdf --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59512.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59512", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:37.230", + "lastModified": "2025-11-11T18:15:37.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59512", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59513.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59513.json new file mode 100644 index 00000000000..991b0bef367 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59513.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59513", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:37.397", + "lastModified": "2025-11-11T18:15:37.397", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59513", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59514.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59514.json new file mode 100644 index 00000000000..cae4e368338 --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59514.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59514", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:37.560", + "lastModified": "2025-11-11T18:15:37.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59514", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59515.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59515.json new file mode 100644 index 00000000000..a1a15ff2f6b --- /dev/null +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59515.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-59515", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:37.723", + "lastModified": "2025-11-11T18:15:37.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59515", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60703.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60703.json new file mode 100644 index 00000000000..cdddf73ea6e --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60703.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60703", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:37.890", + "lastModified": "2025-11-11T18:15:37.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60703", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60704.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60704.json new file mode 100644 index 00000000000..504cf39a4cc --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60704.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60704", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:38.060", + "lastModified": "2025-11-11T18:15:38.060", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-325" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60704", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60705.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60705.json new file mode 100644 index 00000000000..7a17d36d3d7 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60705.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60705", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:38.237", + "lastModified": "2025-11-11T18:15:38.237", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60705", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60706.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60706.json new file mode 100644 index 00000000000..5ed92dc9f3f --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60706.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60706", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:38.403", + "lastModified": "2025-11-11T18:15:38.403", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60706", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60707.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60707.json new file mode 100644 index 00000000000..ab13af526b0 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60707.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60707", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:38.570", + "lastModified": "2025-11-11T18:15:38.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60707", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60708.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60708.json new file mode 100644 index 00000000000..d3591326ee4 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60708.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60708", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:38.737", + "lastModified": "2025-11-11T18:15:38.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60708", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60709.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60709.json new file mode 100644 index 00000000000..6ab913e41b2 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60709.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60709", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:38.903", + "lastModified": "2025-11-11T18:15:38.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60709", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60710.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60710.json new file mode 100644 index 00000000000..45f4faa9c53 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60710.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60710", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:39.073", + "lastModified": "2025-11-11T18:15:39.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-59" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60713.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60713.json new file mode 100644 index 00000000000..004307c7b89 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60713.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60713", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:39.233", + "lastModified": "2025-11-11T18:15:39.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60713", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60714.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60714.json new file mode 100644 index 00000000000..52879c9cb75 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60714.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60714", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:39.390", + "lastModified": "2025-11-11T18:15:39.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60714", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60715.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60715.json new file mode 100644 index 00000000000..82ac86f804d --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60715.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60715", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:39.560", + "lastModified": "2025-11-11T18:15:39.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.0, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60715", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60716.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60716.json new file mode 100644 index 00000000000..b811047cd75 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60716.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60716", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:39.740", + "lastModified": "2025-11-11T18:15:39.740", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60716", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60717.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60717.json new file mode 100644 index 00000000000..c3288ee9a39 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60717.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60717", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:39.900", + "lastModified": "2025-11-11T18:15:39.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60717", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60718.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60718.json new file mode 100644 index 00000000000..5bb85713cdf --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60718.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60718", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:40.073", + "lastModified": "2025-11-11T18:15:40.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-426" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60718", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60719.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60719.json new file mode 100644 index 00000000000..3e772b02d8c --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60719.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60719", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:40.233", + "lastModified": "2025-11-11T18:15:40.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60719", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60720.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60720.json new file mode 100644 index 00000000000..7f4e1ac0731 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60720.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60720", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:40.400", + "lastModified": "2025-11-11T18:15:40.400", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-126" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60720", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60721.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60721.json new file mode 100644 index 00000000000..ce68e4847a1 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60721.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60721", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:40.573", + "lastModified": "2025-11-11T18:15:40.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-270" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60721", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60722.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60722.json new file mode 100644 index 00000000000..87f7cbf9374 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60722.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60722", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:40.733", + "lastModified": "2025-11-11T18:15:40.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60722", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60723.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60723.json new file mode 100644 index 00000000000..e89b8db6e4f --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60723.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-60723", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:40.883", + "lastModified": "2025-11-11T18:15:40.883", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + }, + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60723", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60724.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60724.json new file mode 100644 index 00000000000..51ec4741051 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60724.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60724", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:41.060", + "lastModified": "2025-11-11T18:15:41.060", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60724", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60726.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60726.json new file mode 100644 index 00000000000..ca56d0f5494 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60726.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60726", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:41.240", + "lastModified": "2025-11-11T18:15:41.240", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60726", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60727.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60727.json new file mode 100644 index 00000000000..e52dc36a997 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60727.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-60727", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:41.397", + "lastModified": "2025-11-11T18:15:41.397", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60727", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60728.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60728.json new file mode 100644 index 00000000000..0b47eb83ce3 --- /dev/null +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60728.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-60728", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:41.550", + "lastModified": "2025-11-11T18:15:41.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + }, + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60728", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61814.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61814.json new file mode 100644 index 00000000000..28e5019f87f --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61814.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61814", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T17:15:51.977", + "lastModified": "2025-11-11T17:15:51.977", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/indesign/apsb25-106.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61815.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61815.json new file mode 100644 index 00000000000..6569bbbabd5 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61815.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61815", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T17:15:52.150", + "lastModified": "2025-11-11T17:15:52.150", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/indesign/apsb25-106.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61816.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61816.json new file mode 100644 index 00000000000..d009611e99b --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61816.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61816", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T17:15:52.303", + "lastModified": "2025-11-11T17:15:52.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/incopy/apsb25-107.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61817.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61817.json new file mode 100644 index 00000000000..36d89c67b06 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61817.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61817", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T17:15:52.463", + "lastModified": "2025-11-11T17:15:52.463", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/incopy/apsb25-107.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61818.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61818.json new file mode 100644 index 00000000000..ef08a2db7d1 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61818.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61818", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T17:15:52.617", + "lastModified": "2025-11-11T17:15:52.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/incopy/apsb25-107.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61819.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61819.json new file mode 100644 index 00000000000..9bf68385fb4 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61819.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61819", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:41.710", + "lastModified": "2025-11-11T18:15:41.710", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/photoshop/apsb25-108.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61820.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61820.json new file mode 100644 index 00000000000..4e2f1e92bb7 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61820.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61820", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:41.877", + "lastModified": "2025-11-11T18:15:41.877", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/illustrator/apsb25-109.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61824.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61824.json new file mode 100644 index 00000000000..1ac0aa3959f --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61824.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61824", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T17:15:52.760", + "lastModified": "2025-11-11T17:15:52.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/indesign/apsb25-106.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61826.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61826.json new file mode 100644 index 00000000000..8e83c94c387 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61826.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61826", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:42.040", + "lastModified": "2025-11-11T18:15:42.040", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-191" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61827.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61827.json new file mode 100644 index 00000000000..da6f0605ec1 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61827.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61827", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:42.213", + "lastModified": "2025-11-11T18:15:42.213", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61828.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61828.json new file mode 100644 index 00000000000..c905a24f4ce --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61828.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61828", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:42.377", + "lastModified": "2025-11-11T18:15:42.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Illustrator on iPad versions 3.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61829.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61829.json new file mode 100644 index 00000000000..db2ca5570a5 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61829.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61829", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:42.537", + "lastModified": "2025-11-11T18:15:42.537", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61831.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61831.json new file mode 100644 index 00000000000..b7fa2555c9a --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61831.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61831", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:42.697", + "lastModified": "2025-11-11T18:15:42.697", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Illustrator versions 28.7.10, 29.8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/illustrator/apsb25-109.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61832.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61832.json new file mode 100644 index 00000000000..4f0e201a2c1 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61832.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61832", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T17:15:52.913", + "lastModified": "2025-11-11T17:15:52.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/indesign/apsb25-106.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61836.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61836.json new file mode 100644 index 00000000000..216273dcbb3 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61836.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61836", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T18:15:42.850", + "lastModified": "2025-11-11T18:15:42.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-191" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-621xx/CVE-2025-62199.json b/CVE-2025/CVE-2025-621xx/CVE-2025-62199.json new file mode 100644 index 00000000000..c2a42aa7221 --- /dev/null +++ b/CVE-2025/CVE-2025-621xx/CVE-2025-62199.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62199", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:43.013", + "lastModified": "2025-11-11T18:15:43.013", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Microsoft Office allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62199", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62200.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62200.json new file mode 100644 index 00000000000..5c3720e2346 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62200.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62200", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:43.237", + "lastModified": "2025-11-11T18:15:43.237", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-822" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62200", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62201.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62201.json new file mode 100644 index 00000000000..2522e37d013 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62201.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62201", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:43.440", + "lastModified": "2025-11-11T18:15:43.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62201", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62202.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62202.json new file mode 100644 index 00000000000..5b53fcb51e4 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62202.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62202", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:43.693", + "lastModified": "2025-11-11T18:15:43.693", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62202", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62203.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62203.json new file mode 100644 index 00000000000..dbd94af00d4 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62203.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62203", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:43.970", + "lastModified": "2025-11-11T18:15:43.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62203", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62204.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62204.json new file mode 100644 index 00000000000..355acd7b86c --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62204.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62204", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:45.513", + "lastModified": "2025-11-11T18:15:45.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.0, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62204", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62205.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62205.json new file mode 100644 index 00000000000..9092a7a3503 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62205.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62205", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:46.117", + "lastModified": "2025-11-11T18:15:46.117", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62205", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62206.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62206.json new file mode 100644 index 00000000000..418063cc057 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62206.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62206", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:47.750", + "lastModified": "2025-11-11T18:15:47.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62206", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62208.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62208.json new file mode 100644 index 00000000000..a21c28071c1 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62208.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62208", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:47.923", + "lastModified": "2025-11-11T18:15:47.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-532" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62208", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62209.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62209.json new file mode 100644 index 00000000000..d7e737f8e40 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62209.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62209", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:48.100", + "lastModified": "2025-11-11T18:15:48.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-532" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62209", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62210.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62210.json new file mode 100644 index 00000000000..489ea097e75 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62210.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62210", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:48.273", + "lastModified": "2025-11-11T18:15:48.273", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62210", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62211.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62211.json new file mode 100644 index 00000000000..d6d8bab5ef3 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62211.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62211", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:48.440", + "lastModified": "2025-11-11T18:15:48.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62211", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62213.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62213.json new file mode 100644 index 00000000000..6fa266a3aa2 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62213.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62213", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:48.600", + "lastModified": "2025-11-11T18:15:48.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62213", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62214.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62214.json new file mode 100644 index 00000000000..bb5a13979c4 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62214.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62214", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:48.760", + "lastModified": "2025-11-11T18:15:48.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62214", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62215.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62215.json new file mode 100644 index 00000000000..160022b9a05 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62215.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62215", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:48.920", + "lastModified": "2025-11-11T18:15:48.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + }, + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62215", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62216.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62216.json new file mode 100644 index 00000000000..c751c4ddc1a --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62216.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62216", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:49.080", + "lastModified": "2025-11-11T18:15:49.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in Microsoft Office allows an unauthorized attacker to execute code locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62216", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62217.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62217.json new file mode 100644 index 00000000000..e4fb1780c01 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62217.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62217", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:49.243", + "lastModified": "2025-11-11T18:15:49.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62217", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62218.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62218.json new file mode 100644 index 00000000000..ccfa468c5df --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62218.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62218", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:49.410", + "lastModified": "2025-11-11T18:15:49.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62218", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62219.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62219.json new file mode 100644 index 00000000000..c41d1560aa9 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62219.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62219", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:49.570", + "lastModified": "2025-11-11T18:15:49.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + }, + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62219", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62220.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62220.json new file mode 100644 index 00000000000..70243fcb6db --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62220.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62220", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:49.730", + "lastModified": "2025-11-11T18:15:49.730", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62220", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62222.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62222.json new file mode 100644 index 00000000000..ae0757fa3f1 --- /dev/null +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62222.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62222", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:49.887", + "lastModified": "2025-11-11T18:15:49.887", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62222", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json index a1d913f0716..a7eff64ecf1 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62229", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T06:15:45.300", - "lastModified": "2025-11-06T14:15:44.150", + "lastModified": "2025-11-11T17:15:53.063", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -76,6 +76,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19909", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20960", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-62229", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json index 9818e328df5..30a4fefcdda 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62230", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T06:15:45.593", - "lastModified": "2025-11-06T14:15:44.653", + "lastModified": "2025-11-11T17:15:53.200", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -76,6 +76,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19909", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20960", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-62230", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json index 70817ebb4cb..d4ac671ed3f 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62231", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T05:15:39.120", - "lastModified": "2025-11-06T14:15:44.797", + "lastModified": "2025-11-11T17:15:53.330", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -76,6 +76,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19909", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20960", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-62231", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62449.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62449.json new file mode 100644 index 00000000000..13d2ec34353 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62449.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62449", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:50.043", + "lastModified": "2025-11-11T18:15:50.043", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.3, + "impactScore": 5.5 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62449", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62452.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62452.json new file mode 100644 index 00000000000..3a5bd634da6 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62452.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62452", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:50.250", + "lastModified": "2025-11-11T18:15:50.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.0, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62452", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62453.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62453.json new file mode 100644 index 00000000000..a0bbc1af67e --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62453.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62453", + "sourceIdentifier": "secure@microsoft.com", + "published": "2025-11-11T18:15:50.423", + "lastModified": "2025-11-11T18:15:50.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N", + "baseScore": 5.0, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.3, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secure@microsoft.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-693" + } + ] + } + ], + "references": [ + { + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62453", + "source": "secure@microsoft.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index b9136442fad..7314571ab01 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-11T17:00:11.170979+00:00 +2025-11-11T19:00:11.600784+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-11T16:15:41.080000+00:00 +2025-11-11T18:15:50.423000+00:00 ``` ### Last Data Feed Release @@ -33,53 +33,60 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317678 +317830 ``` ### CVEs added in the last Commit -Recently added CVEs: `22` +Recently added CVEs: `152` -- [CVE-2024-57695](CVE-2024/CVE-2024-576xx/CVE-2024-57695.json) (`2025-11-11T15:15:34.807`) -- [CVE-2025-10905](CVE-2025/CVE-2025-109xx/CVE-2025-10905.json) (`2025-11-11T16:15:37.967`) -- [CVE-2025-10918](CVE-2025/CVE-2025-109xx/CVE-2025-10918.json) (`2025-11-11T16:15:38.113`) -- [CVE-2025-11959](CVE-2025/CVE-2025-119xx/CVE-2025-11959.json) (`2025-11-11T15:15:35.550`) -- [CVE-2025-13012](CVE-2025/CVE-2025-130xx/CVE-2025-13012.json) (`2025-11-11T16:15:38.253`) -- [CVE-2025-13013](CVE-2025/CVE-2025-130xx/CVE-2025-13013.json) (`2025-11-11T16:15:38.367`) -- [CVE-2025-13014](CVE-2025/CVE-2025-130xx/CVE-2025-13014.json) (`2025-11-11T16:15:38.473`) -- [CVE-2025-13015](CVE-2025/CVE-2025-130xx/CVE-2025-13015.json) (`2025-11-11T16:15:38.573`) -- [CVE-2025-13016](CVE-2025/CVE-2025-130xx/CVE-2025-13016.json) (`2025-11-11T16:15:38.677`) -- [CVE-2025-13017](CVE-2025/CVE-2025-130xx/CVE-2025-13017.json) (`2025-11-11T16:15:38.793`) -- [CVE-2025-13018](CVE-2025/CVE-2025-130xx/CVE-2025-13018.json) (`2025-11-11T16:15:38.900`) -- [CVE-2025-13019](CVE-2025/CVE-2025-130xx/CVE-2025-13019.json) (`2025-11-11T16:15:39.000`) -- [CVE-2025-13020](CVE-2025/CVE-2025-130xx/CVE-2025-13020.json) (`2025-11-11T16:15:39.097`) -- [CVE-2025-13021](CVE-2025/CVE-2025-130xx/CVE-2025-13021.json) (`2025-11-11T16:15:39.193`) -- [CVE-2025-13022](CVE-2025/CVE-2025-130xx/CVE-2025-13022.json) (`2025-11-11T16:15:39.287`) -- [CVE-2025-13023](CVE-2025/CVE-2025-130xx/CVE-2025-13023.json) (`2025-11-11T16:15:39.403`) -- [CVE-2025-13024](CVE-2025/CVE-2025-130xx/CVE-2025-13024.json) (`2025-11-11T16:15:39.510`) -- [CVE-2025-13025](CVE-2025/CVE-2025-130xx/CVE-2025-13025.json) (`2025-11-11T16:15:39.613`) -- [CVE-2025-13026](CVE-2025/CVE-2025-130xx/CVE-2025-13026.json) (`2025-11-11T16:15:39.713`) -- [CVE-2025-13027](CVE-2025/CVE-2025-130xx/CVE-2025-13027.json) (`2025-11-11T16:15:39.820`) -- [CVE-2025-64773](CVE-2025/CVE-2025-647xx/CVE-2025-64773.json) (`2025-11-11T16:15:40.260`) -- [CVE-2025-9408](CVE-2025/CVE-2025-94xx/CVE-2025-9408.json) (`2025-11-11T16:15:40.917`) +- [CVE-2025-61836](CVE-2025/CVE-2025-618xx/CVE-2025-61836.json) (`2025-11-11T18:15:42.850`) +- [CVE-2025-62199](CVE-2025/CVE-2025-621xx/CVE-2025-62199.json) (`2025-11-11T18:15:43.013`) +- [CVE-2025-62200](CVE-2025/CVE-2025-622xx/CVE-2025-62200.json) (`2025-11-11T18:15:43.237`) +- [CVE-2025-62201](CVE-2025/CVE-2025-622xx/CVE-2025-62201.json) (`2025-11-11T18:15:43.440`) +- [CVE-2025-62202](CVE-2025/CVE-2025-622xx/CVE-2025-62202.json) (`2025-11-11T18:15:43.693`) +- [CVE-2025-62203](CVE-2025/CVE-2025-622xx/CVE-2025-62203.json) (`2025-11-11T18:15:43.970`) +- [CVE-2025-62204](CVE-2025/CVE-2025-622xx/CVE-2025-62204.json) (`2025-11-11T18:15:45.513`) +- [CVE-2025-62205](CVE-2025/CVE-2025-622xx/CVE-2025-62205.json) (`2025-11-11T18:15:46.117`) +- [CVE-2025-62206](CVE-2025/CVE-2025-622xx/CVE-2025-62206.json) (`2025-11-11T18:15:47.750`) +- [CVE-2025-62208](CVE-2025/CVE-2025-622xx/CVE-2025-62208.json) (`2025-11-11T18:15:47.923`) +- [CVE-2025-62209](CVE-2025/CVE-2025-622xx/CVE-2025-62209.json) (`2025-11-11T18:15:48.100`) +- [CVE-2025-62210](CVE-2025/CVE-2025-622xx/CVE-2025-62210.json) (`2025-11-11T18:15:48.273`) +- [CVE-2025-62211](CVE-2025/CVE-2025-622xx/CVE-2025-62211.json) (`2025-11-11T18:15:48.440`) +- [CVE-2025-62213](CVE-2025/CVE-2025-622xx/CVE-2025-62213.json) (`2025-11-11T18:15:48.600`) +- [CVE-2025-62214](CVE-2025/CVE-2025-622xx/CVE-2025-62214.json) (`2025-11-11T18:15:48.760`) +- [CVE-2025-62215](CVE-2025/CVE-2025-622xx/CVE-2025-62215.json) (`2025-11-11T18:15:48.920`) +- [CVE-2025-62216](CVE-2025/CVE-2025-622xx/CVE-2025-62216.json) (`2025-11-11T18:15:49.080`) +- [CVE-2025-62217](CVE-2025/CVE-2025-622xx/CVE-2025-62217.json) (`2025-11-11T18:15:49.243`) +- [CVE-2025-62218](CVE-2025/CVE-2025-622xx/CVE-2025-62218.json) (`2025-11-11T18:15:49.410`) +- [CVE-2025-62219](CVE-2025/CVE-2025-622xx/CVE-2025-62219.json) (`2025-11-11T18:15:49.570`) +- [CVE-2025-62220](CVE-2025/CVE-2025-622xx/CVE-2025-62220.json) (`2025-11-11T18:15:49.730`) +- [CVE-2025-62222](CVE-2025/CVE-2025-622xx/CVE-2025-62222.json) (`2025-11-11T18:15:49.887`) +- [CVE-2025-62449](CVE-2025/CVE-2025-624xx/CVE-2025-62449.json) (`2025-11-11T18:15:50.043`) +- [CVE-2025-62452](CVE-2025/CVE-2025-624xx/CVE-2025-62452.json) (`2025-11-11T18:15:50.250`) +- [CVE-2025-62453](CVE-2025/CVE-2025-624xx/CVE-2025-62453.json) (`2025-11-11T18:15:50.423`) ### CVEs modified in the last Commit -Recently modified CVEs: `12` +Recently modified CVEs: `16` -- [CVE-2021-33624](CVE-2021/CVE-2021-336xx/CVE-2021-33624.json) (`2025-11-11T16:15:33.760`) -- [CVE-2025-11622](CVE-2025/CVE-2025-116xx/CVE-2025-11622.json) (`2025-11-11T15:15:35.277`) -- [CVE-2025-11748](CVE-2025/CVE-2025-117xx/CVE-2025-11748.json) (`2025-11-11T15:15:35.427`) -- [CVE-2025-24085](CVE-2025/CVE-2025-240xx/CVE-2025-24085.json) (`2025-11-11T15:15:35.720`) -- [CVE-2025-24201](CVE-2025/CVE-2025-242xx/CVE-2025-24201.json) (`2025-11-11T15:15:35.957`) -- [CVE-2025-54115](CVE-2025/CVE-2025-541xx/CVE-2025-54115.json) (`2025-11-11T15:15:36.177`) -- [CVE-2025-58726](CVE-2025/CVE-2025-587xx/CVE-2025-58726.json) (`2025-11-11T15:15:36.350`) -- [CVE-2025-59287](CVE-2025/CVE-2025-592xx/CVE-2025-59287.json) (`2025-11-11T15:15:36.537`) -- [CVE-2025-6020](CVE-2025/CVE-2025-60xx/CVE-2025-6020.json) (`2025-11-11T16:15:40.430`) -- [CVE-2025-61984](CVE-2025/CVE-2025-619xx/CVE-2025-61984.json) (`2025-11-11T15:15:36.703`) -- [CVE-2025-9713](CVE-2025/CVE-2025-97xx/CVE-2025-9713.json) (`2025-11-11T15:15:36.883`) -- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-11T16:15:41.080`) +- [CVE-2019-12735](CVE-2019/CVE-2019-127xx/CVE-2019-12735.json) (`2025-11-11T17:15:34.740`) +- [CVE-2020-25760](CVE-2020/CVE-2020-257xx/CVE-2020-25760.json) (`2025-11-11T17:15:35.107`) +- [CVE-2020-25761](CVE-2020/CVE-2020-257xx/CVE-2020-25761.json) (`2025-11-11T17:15:35.393`) +- [CVE-2021-27129](CVE-2021/CVE-2021-271xx/CVE-2021-27129.json) (`2025-11-11T18:15:33.590`) +- [CVE-2023-36375](CVE-2023/CVE-2023-363xx/CVE-2023-36375.json) (`2025-11-11T18:15:33.763`) +- [CVE-2023-38965](CVE-2023/CVE-2023-389xx/CVE-2023-38965.json) (`2025-11-11T17:15:35.667`) +- [CVE-2023-41537](CVE-2023/CVE-2023-415xx/CVE-2023-41537.json) (`2025-11-11T18:15:33.933`) +- [CVE-2023-52355](CVE-2023/CVE-2023-523xx/CVE-2023-52355.json) (`2025-11-11T17:15:36.130`) +- [CVE-2023-52356](CVE-2023/CVE-2023-523xx/CVE-2023-52356.json) (`2025-11-11T17:15:36.290`) +- [CVE-2024-33485](CVE-2024/CVE-2024-334xx/CVE-2024-33485.json) (`2025-11-11T18:15:34.377`) +- [CVE-2024-45777](CVE-2024/CVE-2024-457xx/CVE-2024-45777.json) (`2025-11-11T17:15:37.593`) +- [CVE-2025-11953](CVE-2025/CVE-2025-119xx/CVE-2025-11953.json) (`2025-11-11T17:15:38.977`) +- [CVE-2025-43079](CVE-2025/CVE-2025-430xx/CVE-2025-43079.json) (`2025-11-11T18:15:35.277`) +- [CVE-2025-62229](CVE-2025/CVE-2025-622xx/CVE-2025-62229.json) (`2025-11-11T17:15:53.063`) +- [CVE-2025-62230](CVE-2025/CVE-2025-622xx/CVE-2025-62230.json) (`2025-11-11T17:15:53.200`) +- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-11-11T17:15:53.330`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 80036598d50..4e3eac592eb 100644 --- a/_state.csv +++ b/_state.csv @@ -131231,7 +131231,7 @@ CVE-2019-12731,0,0,bfd16e421f6e46ad76faa0c05692ea8777ad823e2520974d205b1f8f09bb9 CVE-2019-12732,0,0,94a8f305240546003f9580b5805daab64c392b178abbdb6d242cf9649aa04aa9,2024-11-21T04:23:27.463000 CVE-2019-12733,0,0,428a7810611da52e0d8b21ee93b4c2ae669c72a06e5ac569e930b487ae5e327d,2024-11-21T04:23:27.600000 CVE-2019-12734,0,0,01965d100378552e3dfadbbd0adfca444b80d0de9b298b115f4af889acb5b553,2024-11-21T04:23:27.750000 -CVE-2019-12735,0,0,28e9f186e7cae5de2672b74850536c8a6d4bdd52d0f6017ef871d7d3bddf3969,2024-11-21T04:23:27.880000 +CVE-2019-12735,0,1,2accb34d4d4d3bfb888ee99fbac2962daa6b27e038651b41b8ed6d461e6edfe7,2025-11-11T17:15:34.740000 CVE-2019-12736,0,0,3ee3bcb027e5bc70726a1a71a2d36e0b38a6369f69a25050a29f8557c1399b13,2024-11-21T04:23:28.067000 CVE-2019-12737,0,0,3551f0758017fc7184f0f9469e7e7fe1b194b7cd109777b61acd315d075ef20e,2024-11-21T04:23:28.200000 CVE-2019-12739,0,0,4e4a15d23dd322e62c2c335aef7741887ab813c9e9202974356b3a1db5d23537,2024-11-21T04:23:28.337000 @@ -155501,8 +155501,8 @@ CVE-2020-25757,0,0,daf4c6eb3052a6ba33eec4b58152d476b4d01631539357919fa5d06fc29e4 CVE-2020-25758,0,0,25850557b241738bca1079649155e8babfed6308aec4e84b02e1b2e23f6a8b03,2024-11-21T05:18:41.153000 CVE-2020-25759,0,0,ed3e18e70e83fb0aa17948c219c482e704d6a3cbdb5040319351bcaa56be50f9,2024-11-21T05:18:41.377000 CVE-2020-2576,0,0,f24949d116baabfa1aa862a220f0c12570cef4a211d40bf47b518fcff5eca716,2024-11-21T05:25:36.230000 -CVE-2020-25760,0,0,4a97c8f9d056f5cd771c63aa6f276750d32b9221b47f64cdce457da6aef26701,2024-11-21T05:18:41.610000 -CVE-2020-25761,0,0,6b82d2be7ccebc5a2c40646e93214e413a4934ef8d94f713ea8029f4a5975713,2024-11-21T05:18:41.820000 +CVE-2020-25760,0,1,33aea18364c239d5f54a77cf7a7d801a861bba355241591cdd1e1a2718b441d7,2025-11-11T17:15:35.107000 +CVE-2020-25761,0,1,7682546b56c3066442ed82af6ad0f9b3e3b81b700b7056c8b9eff17ad588ae18,2025-11-11T17:15:35.393000 CVE-2020-25762,0,0,8f397ab6fa9ee0a0ee70c2d0227aa8ffcf02f0b2e9b75afae3e5d61d7d7cbb5a,2024-11-21T05:18:42.040000 CVE-2020-25763,0,0,7b8eb09ae6e6570343d86336c169af61f6acc7ca756ee6773bc735b8f75014a9,2024-11-21T05:18:42.240000 CVE-2020-25765,0,0,62c472faf1f485b2da8053eeff5c71991a673a192ba44f1a00815b7ed8fa64e5,2024-11-21T05:18:42.433000 @@ -173015,7 +173015,7 @@ CVE-2021-27114,0,0,6283feb6c3f9b6cf76673306772cb2987d9a0642fc72ffa41b130736422ab CVE-2021-27116,0,0,0e8c04328e2dee8fac1676c9711a370a6681d4fe00e74b6eaeadc589e059290f,2024-11-21T05:57:22.187000 CVE-2021-27117,0,0,a10b4db7f48dc2574da0d79d26c72e8d181eb16d0a89a7e9d20c844a88881254,2024-11-21T05:57:22.343000 CVE-2021-27124,0,0,caa9e243fd0c4f39c7cddfb08ca7c996a3ceaff507dd595007dc7e6b84997e4c,2024-11-21T05:57:22.490000 -CVE-2021-27129,0,0,ce768e476dc3f95a668a8d798fe4af576c2d36d8e2048aeca77f2b5e30422801,2024-11-21T05:57:22.637000 +CVE-2021-27129,0,1,295684d382e981531d61c9496e76a6980790136e0d166de5242f921c060178b8,2025-11-11T18:15:33.590000 CVE-2021-27130,0,0,aa628e652e5e87d6e04a11a65a5a9117ff6753d4052cbf2dbbfbca1a286476ca,2024-11-21T05:57:22.777000 CVE-2021-27131,0,0,fb547a95ae7b6c18f829b20386e7bb68238a64bb4ced419acc3e1d22cecbfbee,2024-11-21T05:57:22.917000 CVE-2021-27132,0,0,b3d143875ff543ba38ccd36e70fd1a5c042fec66e32762ed7cb3d6cf48cf8b34,2024-11-21T05:57:23.080000 @@ -177822,7 +177822,7 @@ CVE-2021-33620,0,0,06a2a71f5cea4d018fc4f1b3293aaa0f18de7ee4a95c2d9cbf44149a3f7d1 CVE-2021-33621,0,0,43423938966c65d6e1a6c0f5e1247bfa88eea73e5b7a377992c0d43022bbae42,2025-11-04T16:15:42.820000 CVE-2021-33622,0,0,a292d1a86810858d924f0c4944724c8e34d8bad6ef39e4ac26b1a17064f93be7,2024-11-21T06:09:12.730000 CVE-2021-33623,0,0,fa2c57dd5b472e7df33809432b940fe099d260e50725ec5a96a3d83c6867175d,2024-11-21T06:09:12.880000 -CVE-2021-33624,0,1,23aaddcb4f8d0c1f981cb58dda95e61c87ea7a7ad34c0e4e4361188fd5cd5d0b,2025-11-11T16:15:33.760000 +CVE-2021-33624,0,0,23aaddcb4f8d0c1f981cb58dda95e61c87ea7a7ad34c0e4e4361188fd5cd5d0b,2025-11-11T16:15:33.760000 CVE-2021-33625,0,0,497329af6d829201f42dafb3d25c51bfd39e0195924ac227d49430fd02f0786e,2025-11-04T20:16:00.210000 CVE-2021-33626,0,0,2ae9a3917d83b8e53ad7e73e09d9013f927b1e1e6f4cf4e1a6b14743dd586bb7,2025-11-04T20:16:00.367000 CVE-2021-33627,0,0,8abb84eb0b7f5253f77145f38090783479d62f3d03b329470bfc4b29feb891aa,2025-11-04T20:16:00.530000 @@ -230519,7 +230519,7 @@ CVE-2023-36369,0,0,541717b82a363ceb2a7ec9eb570391867133a2599698bc15c5eb943b22ce1 CVE-2023-3637,0,0,227991128f62b77fc07e745e6c63d0dc3a410b81f0afc02e6635178914467f92,2024-11-21T08:17:43.517000 CVE-2023-36370,0,0,00ade74a1a6f500421cef40b702854cbcd78996e0698e8815fee91d49625eb55,2024-12-06T20:15:22.850000 CVE-2023-36371,0,0,6ad57d8c8da6f5d0c01a6aed6b1a6f0cbebe6cafe7352d4a51b7cff5e4523f94,2024-12-06T20:15:23.280000 -CVE-2023-36375,0,0,40bb8dd80748353b3bc57b2ecc3e6d2eb5d7c3c88cd22fd90b85e5c81f5b72f1,2024-11-21T08:09:37.623000 +CVE-2023-36375,0,1,66836d84bb06411fdd879adbbd79712b1fb8ab9867156b0b477e647fe4e0cc86,2025-11-11T18:15:33.763000 CVE-2023-36376,0,0,597956ccaf6fc5f399209e511cde340bb0704f08fa1eda9bc081fd7817bf6bf5,2024-11-21T08:09:37.783000 CVE-2023-36377,0,0,0f41971459b25e5fb7015ab2ca396c930e0af34cca083b91c99fe7f4172bc59e,2024-11-21T08:09:37.943000 CVE-2023-3638,0,0,72965a2b95e531e90f411bd7f317349ee486eebfdc89889d40b83991503e6acb,2024-11-21T08:17:43.683000 @@ -232764,7 +232764,7 @@ CVE-2023-3896,0,0,bcb1ad857afd45cb90758ed1aceb46e20dcd3fdc2e4df701f8bfd3b9957bbf CVE-2023-38960,0,0,43df81eddaad365cf5aa622ba36d65e9c811e6a407592d1d30a68b974c8e014e,2025-05-07T22:15:16.650000 CVE-2023-38961,0,0,55ca73eea9ef8279bfff7b5ae7bb3244e3734e07fae8e4aa156d6f0fec71d858,2024-11-21T08:14:32.343000 CVE-2023-38964,0,0,41febe4b311a5b44abcbd4bc3ef0821241601294d091cb55fbf1c0131cbc75be,2024-11-21T08:14:32.497000 -CVE-2023-38965,0,0,00cc4014b9d6970f67f358d8ba7b9770253eefe3de5584e434dc2599ce0b7e12,2024-11-21T08:14:32.650000 +CVE-2023-38965,0,1,c803ddcf38ed5bee4bd0c183caf6a542b16c672296bd79d1223efd4694346beb,2025-11-11T17:15:35.667000 CVE-2023-38969,0,0,dbb5af54b04db88d4f92d68ae4686afa51fa311bbfae92fa4f82894e859065ed,2024-11-21T08:14:32.810000 CVE-2023-3897,0,0,723b56ce9b943b3ed900c576b25a13372f9278ebced24357b1481cbfbd8b5e10,2025-02-13T17:16:59.883000 CVE-2023-38970,0,0,2fdb7db5c7e876b05ddfd14c908a05641084d7102f416fca87806f7c76ccceff,2024-11-21T08:14:33.030000 @@ -234806,7 +234806,7 @@ CVE-2023-4153,0,0,8a5d6c42cba6526b7c8430f1798da45dace4994dc5f29622c78d5d3374df9f CVE-2023-41530,0,0,7b09f5ed2b83b7f9103ea5a88af51eb40108e8be4ce546bdae3f012389c1f946,2025-08-11T14:45:20.757000 CVE-2023-41531,0,0,1571add5650e32753a4ec46e861836b0ef267bb12bc9457cd7e80cdc04453d4a,2025-08-11T14:45:29.653000 CVE-2023-41532,0,0,a49061daeb6a839154eedac98c2197f5894cebb9c7fb086070b3215ce674c978,2025-08-11T14:45:38.017000 -CVE-2023-41537,0,0,813b26f0a3e3bef990940e4d9e606bc5cc0e0c25abd1bfc7bdf7496a2c6d33cd,2024-11-21T08:21:15.730000 +CVE-2023-41537,0,1,8a2523129c3ed100f2ce1ad068aa60a0adf846fe008e21d0d6ba9dd4f3f40ca7,2025-11-11T18:15:33.933000 CVE-2023-41538,0,0,25bb3d93e3c54e045a29e9a717c9802048c6e910423a276d6b7ba244d72c2b54,2024-11-21T08:21:15.880000 CVE-2023-41539,0,0,5421c6ae427e9761a7723ae97b30e1a4ccf3bf46b4fa2326a26c6ab426e615e7,2024-11-21T08:21:16.027000 CVE-2023-4154,0,0,8bb6b96f4fad44f8ca750dae8edf02cdac6385773778044db00a78378ec31695,2024-11-21T08:34:29.827000 @@ -242685,8 +242685,8 @@ CVE-2023-52351,0,0,448f7942c96c25ea8e8387a26e6c13afee86381a4524395c9a057513ebae8 CVE-2023-52352,0,0,5856303046024173dd00580b23bd3df154cf20f68d81cab46b05cc365985c05c,2025-03-28T20:15:19.573000 CVE-2023-52353,0,0,4c820ea962e9a0ff1756efdd0122b94d606ad2c9a41ef4824e13f8d28bddfe70,2025-05-30T15:15:27.850000 CVE-2023-52354,0,0,8c8463cef87962bbc23ee9b78afad80c468654b4fce03c9b3605d79c5ea7eb42,2025-06-17T16:15:32.190000 -CVE-2023-52355,0,0,299969b0386a5d4e00a55f41710eef8d0aae6cae26e8c4438026b903ba2e05c6,2024-11-21T08:39:38.020000 -CVE-2023-52356,0,0,648ff8ea6508bc8a85d0c9bec73a664f5c219f27b94056180dd4a397dd283dc8,2025-11-03T21:16:02.937000 +CVE-2023-52355,0,1,84b3aeea2c3418f9703f5f760f3b52729d89257bf96d458643f58ebc733f128c,2025-11-11T17:15:36.130000 +CVE-2023-52356,0,1,15d87ac04b043bf134fc465714eb7f50d714ae6cec3bc0a104d86aa51d4b3925,2025-11-11T17:15:36.290000 CVE-2023-52357,0,0,c90b8cf2c9fd4f0bd5f3a1801bd62383f3576028919c434b9e3c4930a49535c4,2024-12-06T19:31:16.340000 CVE-2023-52358,0,0,caff3a3cceeaa9f53391afabc8456e4d7818c60c58df2a6f9a8d9ac878bf0536,2025-03-13T14:47:46.747000 CVE-2023-52359,0,0,d111661793c7321f70f0dc313319112ada0d9977237410299ea5e29f987c203b,2025-03-27T21:15:43.330000 @@ -262131,7 +262131,7 @@ CVE-2024-3347,0,0,a32226f0e463a7a077ec7c084c54edea3f3f25243ad5fa7aea905ca56d7c95 CVE-2024-33470,0,0,08742a77635184295f1eb4cd590862e27d57823d4ad2e85bd8bf65959a85d00d,2024-11-21T09:17:00.293000 CVE-2024-33471,0,0,70fd7f1f07be12a7e1cc088009fc2e2ec3d705634ba21a89ed0b1fc39d5857b1,2024-11-21T09:17:00.520000 CVE-2024-3348,0,0,87517d5c62b02b7f79cb5c966fbe8ea8a9224853a6897fcd4a4959d89dddc90c,2025-02-11T14:42:51.353000 -CVE-2024-33485,0,0,5751924042ec18ca26c59e12f67b6f868f04b8c9d386bcb9a4978361ed711846,2024-11-21T09:17:00.733000 +CVE-2024-33485,0,1,9bf071a2c91239f09a61143e963885957fa6bba961b8612a3d2d590739d20d72,2025-11-11T18:15:34.377000 CVE-2024-33489,0,0,5901615e7c16a5829679031c91bfceec0d4b20f4b3edd62f296b6f7040654d47,2025-03-07T15:59:23.650000 CVE-2024-3349,0,0,d089041a729f847d9058185370668553b4546e0cb6c88638587c2c6db3d3b605,2025-02-11T14:43:45.883000 CVE-2024-33490,0,0,2bd7f26e302f1318b2fa50807a128739497edf997adab5a8aabb74d136f70e35,2025-03-07T15:59:33.010000 @@ -271929,7 +271929,7 @@ CVE-2024-45773,0,0,fa133c6be41b30498db96f8cc8924c7e28e5e1652411403fbf684ea7526e1 CVE-2024-45774,0,0,2aa21b4b35d9065bd03b2962129cae13efd9a3d139bbf47df1112adefa0c000d,2025-05-13T20:15:24.610000 CVE-2024-45775,0,0,2aad8aa3732a6a88870d733593c0b96ef92b8aaeb41c1ea8d3328e235dee9dfa,2025-05-13T20:15:24.717000 CVE-2024-45776,0,0,9da560161122325faf7ac74931055523978bb1bbd407e54a19fcc5ec4f5f3219,2025-09-18T09:15:32.970000 -CVE-2024-45777,0,0,3999fb67228ee1904f9b9e7346548573fba6d5aee0af39dc00551f6f68dbafa6,2025-07-28T17:26:10.740000 +CVE-2024-45777,0,1,57bf5295d691e933899b8207a56064ffcaf9db1c95af9464a251ff899e8e2c01,2025-11-11T17:15:37.593000 CVE-2024-45778,0,0,b929246af54e0f1db564dace4e679a47e76fa5b10a1b2b06e30788705d692d59,2025-03-07T20:42:48.793000 CVE-2024-45779,0,0,bc287c5c1aa38348f1c47747c0112c896ecb759ebb7f5a8f01142e8963bab73b,2025-03-25T05:15:39.697000 CVE-2024-4578,0,0,bdbd727086f88b7c6dce9bba415908bda128d8ea217ac43f45c5788929d872c3,2024-11-21T09:43:08.790000 @@ -280301,7 +280301,7 @@ CVE-2024-57685,0,0,4a00cfd1abce6a2e0519097fb6cb1a5d4f69fe6690ab459a9adedbc723fb3 CVE-2024-57686,0,0,5b766596dd73178cc11abbcc48e7a179102c3199e3151898d4423b80d212902b,2025-03-28T19:17:41.700000 CVE-2024-57687,0,0,fd17afd2ff7131d64aa770c0cef5952b4d797e62edffaacc35acb229d78421b9,2025-03-28T19:16:24.640000 CVE-2024-5769,0,0,abfeb18ae91d2e4533cdbeb4bf7ad73d20beb760222f23226220c40a5c6d9f91,2025-01-09T11:15:16.127000 -CVE-2024-57695,1,1,8a3f9fec02db2a7cd04e0d5fe827fc04b7b97df58d299c8950676b6ceacdcac0,2025-11-11T15:15:34.807000 +CVE-2024-57695,0,0,8a3f9fec02db2a7cd04e0d5fe827fc04b7b97df58d299c8950676b6ceacdcac0,2025-11-11T15:15:34.807000 CVE-2024-57698,0,0,1370a4df3369e50b5c4bd8965cab423f6fa139397c6075af2a658e302473288f,2025-05-28T19:18:54.673000 CVE-2024-57699,0,0,9810302493558cd2aa388d92a46812487319c834736468c7ce96e6ee43329a39,2025-02-06T16:15:41.170000 CVE-2024-5770,0,0,918380eecb24f860d41c083e6e9a778682d01ec1efa0eb8b0287a3dccfe91d0a,2024-11-21T09:48:18.730000 @@ -286308,7 +286308,7 @@ CVE-2025-10897,0,0,cf38d175ce23bca9930463b6d37f1f81d0aa40c01ca2670840a6260a6d55b CVE-2025-10901,0,0,00229db860cc69bb30d87781a5cbb724f6da918c12e237edfe99fbc4fe90e871,2025-10-27T13:20:15.637000 CVE-2025-10902,0,0,ad6fb4996c462d3ca3deb953b988adafe2fb9424dd7a58e92254af6b4a365ae3,2025-10-27T13:20:15.637000 CVE-2025-10904,0,0,65b64b64139e33b37b60e72b7544ca001f4198afb7b58c6812f96cfbb9613d57,2025-10-07T23:15:32.930000 -CVE-2025-10905,1,1,9053da9805d415dedc033646be188f45a50925691cf2cf7fcaf2ec910fbb0602,2025-11-11T16:15:37.967000 +CVE-2025-10905,0,0,9053da9805d415dedc033646be188f45a50925691cf2cf7fcaf2ec910fbb0602,2025-11-11T16:15:37.967000 CVE-2025-10906,0,0,398f19602f87fe52de5ba52eac045ac633b4ff091d9f8d3bc4dfb35338e2a0fd,2025-09-24T18:11:24.520000 CVE-2025-10907,0,0,c9a5817d429c76f3ebf1761e1ce54c27ab1fae1f811ffae318f8f98111be9a68,2025-11-06T19:45:30.990000 CVE-2025-10909,0,0,3cdfe05eed917ad7fe7b309a9322b47700adc4ba42dae6b861bcfd1f19722d04,2025-10-20T05:15:35.080000 @@ -286316,7 +286316,7 @@ CVE-2025-1091,0,0,41f3aeac640c3e0e17c6b04948a8dcf1ae635325d94a919fd15d739e41c450 CVE-2025-10911,0,0,0f8088d3768a9fad51f62d02ca7e5d98322d0ab42473558bcd299e1d15fae289,2025-09-26T14:32:53.583000 CVE-2025-10914,0,0,7f71091cc4a3fb5a18494580a354e7437637e432c00a44416253f72ef770d17f,2025-10-27T13:20:33.350000 CVE-2025-10916,0,0,df2a73dee5df169811791467032cc3aeb3bb5629d52d86563ca51b9d695f98bc,2025-10-21T19:31:25.450000 -CVE-2025-10918,1,1,48153c967017402e2b1888064b163a7342878fb1b977c2ebe476d49a755896cd,2025-11-11T16:15:38.113000 +CVE-2025-10918,0,0,48153c967017402e2b1888064b163a7342878fb1b977c2ebe476d49a755896cd,2025-11-11T16:15:38.113000 CVE-2025-10920,0,0,4d58503acd7d8b28c0971a22d401912a3e31753bc0371233607eddc153dd7239,2025-11-04T13:16:40.540000 CVE-2025-10921,0,0,88e191472d2bb69f7f50d088c2cd15ad20c449c8a3ca28722945c0bcdf245646,2025-11-04T17:08:46.460000 CVE-2025-10922,0,0,9bf5ddc080885067d66025f2821e67812ff689b753bdbccd8789fc8d771877bf,2025-11-04T13:15:06.710000 @@ -286941,7 +286941,7 @@ CVE-2025-11618,0,0,9a82dc28556de002fa6686b421f404efa5b873cecf18e5380890759120edb CVE-2025-11619,0,0,3535ffe6a567a68e4826cad825401ccded11e64aee2e9061023dfca5229a864c,2025-10-28T15:21:56.833000 CVE-2025-1162,0,0,878369ed5b81b79fe348922d75159a1b4747b45bc7f97da2088e438208da00bd,2025-05-28T17:22:59.643000 CVE-2025-11621,0,0,4865d66a7d0f9cc1997dce8379d5790d0d2e7d13e13d672a5ca516b4c4a1295f,2025-10-27T13:20:15.637000 -CVE-2025-11622,0,1,68fae864aec6ec68a6125b3eca8f94a4e90b4b715084f9482b1e22746a0f881a,2025-11-11T15:15:35.277000 +CVE-2025-11622,0,0,68fae864aec6ec68a6125b3eca8f94a4e90b4b715084f9482b1e22746a0f881a,2025-11-11T15:15:35.277000 CVE-2025-11623,0,0,461dfa5884d62b0ec6ba52e609c0066d5d70f876d5d1abfca397196fa2729468,2025-10-15T19:02:22.653000 CVE-2025-11624,0,0,83a9ede0905f4f290da9b4761e3c31493f23a943f731a8433722639bc7796984,2025-10-21T19:31:25.450000 CVE-2025-11625,0,0,cd70d34efea3a8f35741f0f6a704487b7b3875202c25634ab68daf6d79b2e7c6,2025-10-21T19:31:25.450000 @@ -287049,7 +287049,7 @@ CVE-2025-11741,0,0,e8146a0ce2e3133d24dba8af4cbc547d2bc9f823ed269e35be16779250a54 CVE-2025-11742,0,0,a278f85bdaf17c1a69b049b58010b05d4c84ece95ba8c02798d0a8134ae6ec3e,2025-10-21T19:31:25.450000 CVE-2025-11745,0,0,5e375b7e01a992036a63fab3266cbd88753f4bb96e33c2669f54170738220baf,2025-11-06T19:45:30.990000 CVE-2025-11746,0,0,a4ad3da1c5c2ab0b1acd9b2095a5bd254e97c064605783c32b73cf2e331bc296,2025-10-16T15:29:11.563000 -CVE-2025-11748,0,1,caa67f0547bfb38607268c8d100178770f1df89e5ccdff91d4595f33bf725b79,2025-11-11T15:15:35.427000 +CVE-2025-11748,0,0,caa67f0547bfb38607268c8d100178770f1df89e5ccdff91d4595f33bf725b79,2025-11-11T15:15:35.427000 CVE-2025-11749,0,0,f28e1536684c624d00558990824ee358c789bb39f0b79c6b541c87eaa7beda3a,2025-11-06T19:45:30.990000 CVE-2025-1175,0,0,e4e505608345f018f25d9a8f47aadfc991d7592689b77a43eab3f49ae131ee56,2025-02-10T13:15:26.593000 CVE-2025-11750,0,0,55abfd196cfe850652f35d84d05ee4b11a138660fa7edcdbbb774f6c03cfd054,2025-10-30T17:46:46.190000 @@ -287190,12 +287190,12 @@ CVE-2025-11948,0,0,c2bd0abd90cdf8de762e1d9871e1406b4146f5222d5236ff994623983fedb CVE-2025-11949,0,0,3c91bf274a24891c01e515d79a8851d1263137b155508c36ada0c04f9c4e8bed,2025-10-21T19:31:25.450000 CVE-2025-1195,0,0,80f030388af8fea7825bd1907b4fe21f17857f909b5920854f4ff3175ca4ca32,2025-02-20T20:37:54.487000 CVE-2025-11952,0,0,7763840d4b83d968e255da7d1831856c8ed084a045e849395d32da827af2edd8,2025-10-31T14:47:55.680000 -CVE-2025-11953,0,0,33887f10e19c1b4c80cf06c1647be8ba0505c37ba88a836d4ed00fd835342b82,2025-11-04T15:41:31.450000 +CVE-2025-11953,0,1,0d695936df7f01b3bf4e6bc78b663b3ac45142b5c0fbf82578439a24318a4c19,2025-11-11T17:15:38.977000 CVE-2025-11955,0,0,20a8efdb30e76ee46b5937e093e716983192d478b384cd5be1af5237e684f9f5,2025-10-27T13:19:49.063000 CVE-2025-11956,0,0,2dee23341455d7a9eeb094ec8a2d6e60635cfbc89ef3fd6e522e4127c2b6f947,2025-11-06T19:45:09.883000 CVE-2025-11957,0,0,76197e1b3d3e40edb2d1a7b25fb7364bd977f83d374e02bc8c19ddf301cdc740,2025-10-27T20:33:57.130000 CVE-2025-11958,0,0,0fc55e49b05b781ff6489428ee891fa1ca82a55b1d046324447513a4bde29a2b,2025-10-27T20:32:36.870000 -CVE-2025-11959,1,1,5c97bb24dc748455000d4372a83f500b5ec63e6f6968759d6584b77482b57be0,2025-11-11T15:15:35.550000 +CVE-2025-11959,0,0,5c97bb24dc748455000d4372a83f500b5ec63e6f6968759d6584b77482b57be0,2025-11-11T15:15:35.550000 CVE-2025-1196,0,0,dd006c25814afd256aa97758b279860261417526a6b19678795b25893f289a48,2025-02-20T20:38:49.990000 CVE-2025-11960,0,0,7b6ad288567e3dec8b5d3bc4e3baad5cfbb71d73f2e3b17e1462064d8d38aae9,2025-11-11T12:15:33.863000 CVE-2025-11965,0,0,2eabbb4599284d2563d93c27659b79ddd6c7c73e850f48946d732e4261db33e5,2025-10-22T21:12:48.953000 @@ -287764,6 +287764,10 @@ CVE-2025-12933,0,0,2761a2fb0363d391026d3fb9ef0510dd4dac51a4b8b45f8689d67f77ba2b0 CVE-2025-12938,0,0,aa694811d050a7c1e54e48abe912b53198586417cf8ea4a7e2a8558dce547ac4,2025-11-10T12:15:47.020000 CVE-2025-12939,0,0,6a51857e1342c9fc25fa26434940a41ae40289a5530d73b51c963f9736e634f8,2025-11-10T13:15:44.713000 CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000 +CVE-2025-12940,1,1,9c779c6765eb36288df7fe2aecfcbdffbb7f171f8c91ef9e9838ee9839fcd473,2025-11-11T17:15:39.090000 +CVE-2025-12942,1,1,ea3104e195630368242297a36768f2d7039218bfc48bccda7b6e37b4939e8646,2025-11-11T18:15:34.843000 +CVE-2025-12943,1,1,54b80063df149f4abaad1e10999b86d63ca9fd11557c3a8f194dcf5aba4e3e90,2025-11-11T17:15:39.410000 +CVE-2025-12944,1,1,f30e63b2e2304e727fc043c6d436dd6c9620b8ebd0312750ef61b6fcd63452be,2025-11-11T17:15:39.543000 CVE-2025-1295,0,0,2a4bc8a9e306b7d7cae49d0fff6161acb070f2799f35d70bd6c6546c6dbde442,2025-02-27T06:15:21.990000 CVE-2025-12953,0,0,841f3c380db52171cf3aaf4b884f16ce60de7d37405ae2b7f7c2090953781d7f,2025-11-11T11:15:35.230000 CVE-2025-1296,0,0,d95bfd9a7f0753e22aec4081e35e5f3d5b17ed2789c524a1845821d0907a79ad,2025-03-10T18:15:30.237000 @@ -287773,24 +287777,25 @@ CVE-2025-1298,0,0,6d4aedba34a1b42dd7b6cbe281c33d4bfa87f549f0e4974dbe3a1a66067b8d CVE-2025-1299,0,0,05ad5803bebc6b17851a9b0bf8285bd6d3e063e6e9aad7d7dfb7cfe06c333fcf,2025-07-28T13:23:04.953000 CVE-2025-1300,0,0,77db9cd7a18e3de4a8b6c836390a2247e6295125845190568cfff46e60843c32,2025-02-28T13:15:27.043000 CVE-2025-1301,0,0,d7faba0f900312629252c10b0ff69e7ad4067abfd474abf12d63d55853a93aef,2025-09-12T08:15:44.563000 -CVE-2025-13012,1,1,9e04c4383bdd569ef93467d66e845b0c9cf55ebb44e00ceae5329d5d58f391ae,2025-11-11T16:15:38.253000 -CVE-2025-13013,1,1,3e130320863952b1284bfeebc6da78ce383023f017fad1a42f14b9174ca5a573,2025-11-11T16:15:38.367000 -CVE-2025-13014,1,1,9fb4dad710804c11fd73ab71aa7f84440d20c23780fd0b4721a98f0ada0fec50,2025-11-11T16:15:38.473000 -CVE-2025-13015,1,1,fecf6ffcc500d61a59cb8febec012507a557377dba428337a2d23a8b03e8f696,2025-11-11T16:15:38.573000 -CVE-2025-13016,1,1,d7197df6259d0c86b79a9a7940de733cf9b81dcfb0a18d0887a28f36d38c87f7,2025-11-11T16:15:38.677000 -CVE-2025-13017,1,1,0a33608122eeea09def12a72db41b7ac63283cc3ce1159355a155b34476c174c,2025-11-11T16:15:38.793000 -CVE-2025-13018,1,1,ac37deb43f9e51464a0f526716fb88ba5aac9655a4125e9735d732cb904bbbb6,2025-11-11T16:15:38.900000 -CVE-2025-13019,1,1,37fe62772de0f781650e27a6644060dd8d157c355dc8082c3c216213b813bed2,2025-11-11T16:15:39 +CVE-2025-13012,0,0,9e04c4383bdd569ef93467d66e845b0c9cf55ebb44e00ceae5329d5d58f391ae,2025-11-11T16:15:38.253000 +CVE-2025-13013,0,0,3e130320863952b1284bfeebc6da78ce383023f017fad1a42f14b9174ca5a573,2025-11-11T16:15:38.367000 +CVE-2025-13014,0,0,9fb4dad710804c11fd73ab71aa7f84440d20c23780fd0b4721a98f0ada0fec50,2025-11-11T16:15:38.473000 +CVE-2025-13015,0,0,fecf6ffcc500d61a59cb8febec012507a557377dba428337a2d23a8b03e8f696,2025-11-11T16:15:38.573000 +CVE-2025-13016,0,0,d7197df6259d0c86b79a9a7940de733cf9b81dcfb0a18d0887a28f36d38c87f7,2025-11-11T16:15:38.677000 +CVE-2025-13017,0,0,0a33608122eeea09def12a72db41b7ac63283cc3ce1159355a155b34476c174c,2025-11-11T16:15:38.793000 +CVE-2025-13018,0,0,ac37deb43f9e51464a0f526716fb88ba5aac9655a4125e9735d732cb904bbbb6,2025-11-11T16:15:38.900000 +CVE-2025-13019,0,0,37fe62772de0f781650e27a6644060dd8d157c355dc8082c3c216213b813bed2,2025-11-11T16:15:39 CVE-2025-1302,0,0,4c600c674f22378513ee28ce145975f04e5b0e89605ff80d937b77394d750b70,2025-02-15T05:15:11.683000 -CVE-2025-13020,1,1,191024c1cafad680844f445ebdc3f94bc42b37726f32d4f496a6b270bb6c322c,2025-11-11T16:15:39.097000 -CVE-2025-13021,1,1,21a50791fafd78cd3be949ae1c7424f908f8564bca322e06dcda7386f1a04f90,2025-11-11T16:15:39.193000 -CVE-2025-13022,1,1,e1da207211d2b5714fff07ff276d4ecfc52e1ce7850253cca15dbce6699f3a1d,2025-11-11T16:15:39.287000 -CVE-2025-13023,1,1,79b1f039fcc353dd7c28e9612ea7d73ae0806932e879ea018f0cc7d5177db239,2025-11-11T16:15:39.403000 -CVE-2025-13024,1,1,e5db7e5f7cc9ffc01f8b30b23969d3140533fba56adcf8452618eda99497913d,2025-11-11T16:15:39.510000 -CVE-2025-13025,1,1,8b35964a4f640a38c2c886ffede323b0ba815da7795627fcee94fce9a31f9139,2025-11-11T16:15:39.613000 -CVE-2025-13026,1,1,7d081dbcf6adbe63176dd49f2da2b59441bf52bf1612f579aa80dfa154b2eb6e,2025-11-11T16:15:39.713000 -CVE-2025-13027,1,1,d61c353eb62c4500a223dc7643173d05525cbe28c1983f3512e6853c87819432,2025-11-11T16:15:39.820000 +CVE-2025-13020,0,0,191024c1cafad680844f445ebdc3f94bc42b37726f32d4f496a6b270bb6c322c,2025-11-11T16:15:39.097000 +CVE-2025-13021,0,0,21a50791fafd78cd3be949ae1c7424f908f8564bca322e06dcda7386f1a04f90,2025-11-11T16:15:39.193000 +CVE-2025-13022,0,0,e1da207211d2b5714fff07ff276d4ecfc52e1ce7850253cca15dbce6699f3a1d,2025-11-11T16:15:39.287000 +CVE-2025-13023,0,0,79b1f039fcc353dd7c28e9612ea7d73ae0806932e879ea018f0cc7d5177db239,2025-11-11T16:15:39.403000 +CVE-2025-13024,0,0,e5db7e5f7cc9ffc01f8b30b23969d3140533fba56adcf8452618eda99497913d,2025-11-11T16:15:39.510000 +CVE-2025-13025,0,0,8b35964a4f640a38c2c886ffede323b0ba815da7795627fcee94fce9a31f9139,2025-11-11T16:15:39.613000 +CVE-2025-13026,0,0,7d081dbcf6adbe63176dd49f2da2b59441bf52bf1612f579aa80dfa154b2eb6e,2025-11-11T16:15:39.713000 +CVE-2025-13027,0,0,d61c353eb62c4500a223dc7643173d05525cbe28c1983f3512e6853c87819432,2025-11-11T16:15:39.820000 CVE-2025-1303,0,0,77f6e0e2e908dd99b19f92d02615f45188adee7d0a527ba2e05ee367340954fa,2025-08-01T01:58:31.323000 +CVE-2025-13032,1,1,5204316d545cc62899bef2a338497bb17d8d5a50fcc0091867520216f6456f51,2025-11-11T17:15:39.700000 CVE-2025-1304,0,0,19e272dd5c37445f8582e9faeec74dfd955b4d0ec48e945f5531dcff91a0acdc,2025-05-06T15:38:17.380000 CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000 CVE-2025-1306,0,0,de526cacf8bf273c9432977eceb9f985b41588e9255fe87d024d0d9921890929,2025-03-05T18:45:32.943000 @@ -288414,6 +288419,7 @@ CVE-2025-20004,0,0,b41fd66e5620d6ef99a6c291133df66a941b40000f945dc548e07a2ae7b9f CVE-2025-20006,0,0,ef89899351295b0ef544da4e9d80cb4b59a707a8e488697454c52c0d8fbfc083,2025-09-10T14:00:51.053000 CVE-2025-20008,0,0,5be0b71ec1b55164254611e3122c644b37df3841fe170e2955436fcf06d31703,2025-05-16T14:43:56.797000 CVE-2025-20009,0,0,829878dd4069854eeda3bf695789a633d2269d4950bc95d0313620bb6cf0bd0a,2025-05-16T14:43:56.797000 +CVE-2025-20010,1,1,510bb85a17479c879323899f041b26e1049ad7e4c08af4cde61a6c4432348117,2025-11-11T17:15:39.833000 CVE-2025-20011,0,0,4f5ea43d1bf14e05d11686c3e47ec7acf652c2cc5f6c0bcaa593679c7da07477,2025-03-04T19:08:08.873000 CVE-2025-20012,0,0,c788f022285f005f573e16a72ccac2a143d713dcfd610140c58c19b3504c44b1,2025-11-03T20:17:07.193000 CVE-2025-20013,0,0,54d170ca684f3f7350abad0e8122e4846baa23f75c011dd135252b33a0be1757,2025-05-16T14:43:56.797000 @@ -288450,11 +288456,13 @@ CVE-2025-20047,0,0,9cf96a4f41a68b4b8f246809087cbfb2aa19dd53dc67f8aa17d28256eaeec CVE-2025-20048,0,0,160a2d402f9cf5ef7580ed88e4c241b967764bcb2b81cdbe684222b174e78780,2025-08-13T17:34:12.350000 CVE-2025-20049,0,0,5147cf342586e050754516438965bcd2818b726f9780fae2382ab9e034df3bfc,2025-02-28T17:15:16.277000 CVE-2025-2005,0,0,ad448a7035e7ada0d8a8ea87ee39c43487ed27a97283d83016ba53d3a731affe,2025-08-12T17:14:54.880000 +CVE-2025-20050,1,1,c5177248efd30bf3831fb692fd0e7fbac279018b501f71538bb2abb3ea5e1cb7,2025-11-11T17:15:40.007000 CVE-2025-20051,0,0,92f0057477823612cbfc2ff08fdfbe5fd95430ecaa36580190d5b4f2625b52fc,2025-08-18T18:22:38.053000 CVE-2025-20052,0,0,d97f0da09545968291e92265648cfd90e9017a98e1d70096a6052edb1a34339a,2025-05-16T14:43:56.797000 CVE-2025-20053,0,0,640456225c6b3f53fa427f3d935788de352e799dc66204f271cddb2aff6d98cd,2025-11-03T18:15:49.050000 CVE-2025-20054,0,0,959d4dbac8b754616a024876ac2ebfab99355ca185513eacbcf483c55f233218,2025-11-03T20:17:07.330000 CVE-2025-20055,0,0,2d78db23287090ae5d3190213b75b348c3d1d689e77c9b32372b6d83b934f84d,2025-01-14T10:15:07.710000 +CVE-2025-20056,1,1,31b1c910b630ffdba57029cddfdaa480a58b37837a00ad49175395935e6d8d0b,2025-11-11T17:15:40.170000 CVE-2025-20057,0,0,ca8fc5376954947269be2e6ebb2717110f4ce91e57a812f295c958aa4c906c5c,2025-05-16T14:43:56.797000 CVE-2025-20058,0,0,9ef1d6407b35a4ca394b163d06488ab758826f32afdebf1d6be0663fbf9126d8,2025-10-21T11:40:49.670000 CVE-2025-20059,0,0,c1084330f3b962fb98956ad8984d49c0102f6bb9f804c9bde4130df15f4fe94b,2025-02-20T15:15:13.957000 @@ -288463,6 +288471,7 @@ CVE-2025-20060,0,0,ef26af373b8c1500801575569870314eee69d6fc265fd3cd0ef2de4362a96 CVE-2025-20061,0,0,6979d6e76b2847064c2a9b7a24215846556b4a731cf1290fe0f120404af6a611,2025-01-29T20:15:35.363000 CVE-2025-20062,0,0,92abdcf8d58a46ee81f9fdf2533340799897ba0d38ae0833c2eab3ac66d03686,2025-09-10T13:59:35.927000 CVE-2025-20063,0,0,b4b1f4ada55bda82721780b844a74fc568a280f6b4945aede3dbfd98ce0f517a,2025-06-09T19:07:27.137000 +CVE-2025-20065,1,1,f5ac0b447dd6da492eeac0ce23304302a3dfcddee0e26451774de94e65827fce,2025-11-11T17:15:40.337000 CVE-2025-20067,0,0,80c31bfcebcd756c41559d725dd8fc1ffb77c4496c1afaad2c154ff8274b6a29,2025-08-13T17:34:12.350000 CVE-2025-2007,0,0,da59d82323527ec1abfe9f480cc8fe1fd6651069aa66cdf2f4f8acbf4750a509,2025-04-01T20:26:11.547000 CVE-2025-20071,0,0,20298223494bb4a4d40c9c5bd0bf2218fcf397c3599f0ea9a641e3e4ec386ed0,2025-05-16T14:43:56.797000 @@ -288803,6 +288812,7 @@ CVE-2025-2061,0,0,7502460da1ddeda556eda56cc2649e418bcc1066c85ad8067104dbd03a1d7f CVE-2025-20611,0,0,a75e4bad3686848a7c5ba14a185ec7c69f5a37ca6ca5e6b686083b21a44834d7,2025-05-16T14:43:56.797000 CVE-2025-20612,0,0,8a750c66d9e5ecc8d601e9689ffddad257c3f5f7de99dacf55db7b010609c0e2,2025-05-16T14:43:56.797000 CVE-2025-20613,0,0,bcd9aa2132981f81003dc27dabca523d0ee6745d06d4247622c2bf507e0cf4ef,2025-08-13T17:34:12.350000 +CVE-2025-20614,1,1,266392ac460341073cc8ff3862a43b524bf035c4d3b0b5001b1c127b9e480890,2025-11-11T17:15:40.493000 CVE-2025-20615,0,0,4bdb7ad547b1d5e26bc347d865e82b0a29cd307c874897b85046f68556e9dfaa,2025-03-24T13:39:29.907000 CVE-2025-20616,0,0,27db46aebf7c8944e41931a0c43c8340afc70eebbbe58e92c8b82a91fce564d8,2025-05-16T14:43:56.797000 CVE-2025-20617,0,0,c8bfdf3a13c0fef33afce1eb72104d7b2280ba78c5b2dced7cd944ea31c0a2c7,2025-02-20T06:15:20.277000 @@ -288810,6 +288820,7 @@ CVE-2025-20618,0,0,fb402a5a93a1639313d34c1c7f44d1d34325317a28b98955f943ff2a25642 CVE-2025-2062,0,0,f7df9f97d5676ecaf4b0edaaa5c9fb07147a7d065b006be6bbfe34cfbf985eef,2025-05-14T16:15:19.497000 CVE-2025-20620,0,0,3537bfd354e2e5606a7442449870297aadd63b5c6f244c03eb513f3f9ee090eb,2025-01-14T10:15:07.860000 CVE-2025-20621,0,0,c2cc496b6e6ce0e1e5a70299cbda3ad66a1c438bc5669dff1a8ea55beb7ea505,2025-10-01T17:54:41.760000 +CVE-2025-20622,1,1,5c92bfe6ab4a904c6271be0094159bfef478b3e461f224fa066fce5a8a7d3869,2025-11-11T17:15:40.720000 CVE-2025-20623,0,0,aa05fd3a8e5a27be24ac2ac07dfa3dca4f41378eea3a3152c93d752c1f2b968d,2025-11-03T20:17:07.580000 CVE-2025-20624,0,0,78864588356a158777b0822bc8250b70577d239f801fec8a4f371ae6919c0155,2025-05-16T14:43:56.797000 CVE-2025-20625,0,0,303aeafadfe1c092a0b8c9ae74ad97842603ad9832c82b001eb2375014ab0a95,2025-08-13T17:34:12.350000 @@ -290514,6 +290525,7 @@ CVE-2025-22388,0,0,0eda9632aeb05cbea41b59c8b73f92ede1546747ed7862578515a3bccaec7 CVE-2025-22389,0,0,dc8da812f869419852fdc32c1b0a8334090216fc5b734ea7796848126b62a534,2025-05-20T20:10:52.690000 CVE-2025-2239,0,0,9d2e9828cc688e239d6efe000df62673f2e02977b1a02588fbeac8a08d0d24b6,2025-03-12T10:15:19.940000 CVE-2025-22390,0,0,c7012298c39a27e3208e165d682d9b1d0b98a4354f10c6692b4ac4c555e3528a,2025-05-20T20:10:40.360000 +CVE-2025-22391,1,1,4d44b0d820fdb54373e1bfdc1cd53abff71e59f96d69186446ab2583bf26d542,2025-11-11T17:15:40.910000 CVE-2025-22392,0,0,03c46aeac2c765ac0f707dd9ea0921447ced4017af54c520503bf518292c373f,2025-08-13T17:34:12.350000 CVE-2025-22394,0,0,74bb5d327b5fabc5afe5722acba49dd35fe0c1d26a691784f120eb1e4f911ff7,2025-02-04T15:51:11.187000 CVE-2025-22395,0,0,57c4b1d051c16506745f86a05c2206d0865c29f77486f620f2a0dfc5c8b5dd11,2025-02-04T15:49:52.617000 @@ -291434,10 +291446,12 @@ CVE-2025-23353,0,0,4333467a418d531bf1c36a16cf65e2f44122354bc3e9f463473f1928af99b CVE-2025-23354,0,0,848bbbcc7baa98e63f59ba3a8e815fc5140bb5d718587da095009cbc5f560524,2025-10-10T18:24:20.567000 CVE-2025-23355,0,0,17d99aac4fbee41f78cc630b412d47c73f000a315217c5d59de966a79a8bde09,2025-10-22T15:50:29.027000 CVE-2025-23356,0,0,fa8c0c786149fcca4bad7d91fe9d51842ab92bad081d783154edbe5c681d5f9a,2025-10-14T19:35:56.913000 +CVE-2025-23357,1,1,d83aceb6db45e9a9966295240f99cbddccc3fe7368ded027bdfd056131b0a945,2025-11-11T17:15:41.070000 CVE-2025-23358,0,0,6d865376a78c8e890e79119d415e9724cadd73d961e473d7ecc88d50542fd310,2025-11-06T19:45:30.990000 CVE-2025-23359,0,0,2b7c514907f082c48dac4cc0d5fd4d74d78df7de995a1b37d3d8feb875f208bb,2025-09-25T13:50:04.687000 CVE-2025-2336,0,0,ff174678612463f7837922621cff2444dd6c0f6bea39ac4bba0a14261ceb92a5,2025-11-03T20:18:08.697000 CVE-2025-23360,0,0,c78c6d407e7aa9fb20b6a8f1cc9d50ed7ab53a4f48ce43f2ffcc5cfeaafc7049,2025-09-23T19:12:03.027000 +CVE-2025-23361,1,1,e9ec00068d59cfe986d36967414168a14a67aeb3a2305e749bdfc70859d8db29,2025-11-11T17:15:41.260000 CVE-2025-23362,0,0,f1b04109bb5a53f0fa12693fb841988a838f82d29d11cab82e724120097242c3,2025-01-29T02:15:27.910000 CVE-2025-23363,0,0,0841caf767c76cfac06ae656a8fd51e74c590b2d7549055225340748c218ba0e,2025-09-24T00:58:03.703000 CVE-2025-23364,0,0,56b941a497dd97afaafda6eb37481385f8b7e31bd3a993c0ebea978ddb9b1690,2025-08-21T15:23:28.303000 @@ -292203,7 +292217,7 @@ CVE-2025-24081,0,0,7cfcadf9c01e34a6647941d77caf002928eb582a112a438bbff6c9e6fc878 CVE-2025-24082,0,0,7830252df0a57f40d7fe48307b99da956d062a0556d95bf31379829319241f98,2025-07-02T14:55:48.740000 CVE-2025-24083,0,0,61d7191ecb1d0d110b37bdd46ac8757832cfceb79dcb29664ac5496b1637b590,2025-07-02T14:56:09.077000 CVE-2025-24084,0,0,d9d8d0bc4d6e18bf566a146ada4555a34b0b6de02fa2c741a7b29ed5f05283a5,2025-07-07T17:29:07.287000 -CVE-2025-24085,0,1,b7c7cfbda1410be5e1aa942c7aa00806766a01b147fd7c5e6c32aaaf85b50456,2025-11-11T15:15:35.720000 +CVE-2025-24085,0,0,b7c7cfbda1410be5e1aa942c7aa00806766a01b147fd7c5e6c32aaaf85b50456,2025-11-11T15:15:35.720000 CVE-2025-24086,0,0,4d851ba228e9401052d1edc9d2e7d6c848a3d128a799e7d30f89a9b594f2a0dc,2025-11-03T21:19:15.560000 CVE-2025-24087,0,0,1110a60525bf628b04912d4ad5512d55c952041d64054020b4b117b896be91f2,2025-11-03T21:19:15.777000 CVE-2025-24088,0,0,7d2d2b4cfeba2d017a479c277d3ed8ab507ca5451e255166ae360d86dc257ae5,2025-11-03T19:15:48.593000 @@ -292317,7 +292331,7 @@ CVE-2025-24198,0,0,348e2e04242daf160faf45c8b273715a3a1426c6c5282e4b2c11a0d9150f6 CVE-2025-24199,0,0,ddc7f85830a3780bf955676d9160fa463b6a0a57fda68891105dac4aa5f93d44,2025-11-03T21:19:33 CVE-2025-2420,0,0,759a643dd7e1d79c15a36f7d4a45610b663ab71ad52795fbc850f2e2b83fa384,2025-03-18T13:15:37.770000 CVE-2025-24200,0,0,c4e2c93e377248811d79f0d15f595d445361f0287b5d5c89b61c85073a296fc4,2025-11-04T15:23:42.597000 -CVE-2025-24201,0,1,ee43f54bb7c39f0bde248973e3d916ca12f0ac32ca16dc60038ec2e1a6dee5b8,2025-11-11T15:15:35.957000 +CVE-2025-24201,0,0,ee43f54bb7c39f0bde248973e3d916ca12f0ac32ca16dc60038ec2e1a6dee5b8,2025-11-11T15:15:35.957000 CVE-2025-24202,0,0,bad568dae00f9a6f17964cdcbc56f4f53772d5fe041e6bac687f8bc613ffa253,2025-11-03T21:19:33.480000 CVE-2025-24203,0,0,71cad80d95022a597a80e30b7796554e02653a27d8a616a299d382df811dd487,2025-11-06T22:15:39.840000 CVE-2025-24204,0,0,98b0b9c37179decfbf14860ffd5881f4aa85ed25cfdd776b86d6196971428c78,2025-11-03T21:19:33.760000 @@ -292412,18 +292426,21 @@ CVE-2025-24294,0,0,2232fb07ff7a320448bcf938f1a025480eee9f331ac4fdf8bedc8f4b6dfde CVE-2025-24296,0,0,ccb097878f45220cf0f1732c435d786f1a7159ccf444201d26b23057ab1b1053,2025-08-13T17:34:12.350000 CVE-2025-24297,0,0,5d4a74f3648dba475a9505a338d2107001df4a92611f1e742f9c3b8bc6fc9e4e,2025-04-16T13:25:37.340000 CVE-2025-24298,0,0,db7bfd88843d9a6bd21a46028fd3bf3b2a221ffee5c701e1f398af9821e9aa2a,2025-08-12T16:39:29.253000 +CVE-2025-24299,1,1,e4279ed62548921e5e409de2720dda64ce51d825f3ba522ab2eff206c908ad61,2025-11-11T17:15:41.440000 CVE-2025-24301,0,0,7b7c3fba06b103a537ce7db06429d9d2300d69047940e33831c6830c359206c5,2025-03-04T17:15:48.160000 CVE-2025-24302,0,0,1f0071e70a4baac5dd684c6a9da0ee544875e1fa135397972cbcfdddcf783221,2025-08-13T17:34:12.350000 CVE-2025-24303,0,0,4de9839042543e2a3c87840cece004a90b3224cd4b48c2d5fed7fdfc293509fc,2025-08-13T17:34:12.350000 CVE-2025-24304,0,0,9a28b65675634137a12887530ae6bbfb38bceecb18215e23bdb59f0d0365649f,2025-10-16T15:02:11.150000 CVE-2025-24305,0,0,026f641fdb5ed9f119be6cbc4a22b77c206141fa7bc73216569545ecefe49a70,2025-11-03T18:15:51.820000 CVE-2025-24306,0,0,73cf37771b6f85cbd5893cb054304bfb4bf15e5622c3cdffb9a2e4a50bd301ae,2025-03-18T09:15:13.570000 +CVE-2025-24307,1,1,18437e7ede0a042c30b48c41bf145003c057997d698c51f998332361b5c05aae,2025-11-11T17:15:41.617000 CVE-2025-24308,0,0,17cd3a573b182a1c9a1a8983398aaec915a512d656788bff9764198e8415dd22,2025-05-16T14:43:56.797000 CVE-2025-24309,0,0,b881e80e18a543dac7caf5dbe4ebf8345a69e13fed09525eee5962b72198dbe3,2025-03-04T17:16:06.513000 CVE-2025-24310,0,0,79eb65b878bebb3c188042d461bf95ffa89d0a6a24e45ec375e0efb5d01b2e9d,2025-04-07T14:18:15.560000 CVE-2025-24311,0,0,fd90eaf488d3304752945159bbf00a5b17407dfdc06b6a8b1dbba0df6b11af17,2025-11-03T20:17:56.243000 CVE-2025-24312,0,0,c6f7fa2acaaba183233002e612705f947b177e68f94f149c0cbf6276d67830c1,2025-02-05T18:15:34.060000 CVE-2025-24313,0,0,61d633a06c4b8e4dcbd099b7be24e87aabc7a0b77a46cc67e7cf06a4d1481250,2025-08-13T17:34:12.350000 +CVE-2025-24314,1,1,243bf9ea01d8302b4d5a432af52679db9500c155250e53298dae64421a894852,2025-11-11T17:15:41.880000 CVE-2025-24315,0,0,0e26ee76f79f703a200d15e48f75d77e02b1cb3d5dea1889a004bcedc57bbdb3,2025-04-16T13:25:37.340000 CVE-2025-24316,0,0,3d67fc5ca9257bdefdc420f872260ce49c49fc7bc45018e469adac707c1de56f,2025-02-28T17:15:16.790000 CVE-2025-24317,0,0,35ccc8002a4244f9d7e86d9c29c1e10a53dba7ff2370cbdb2aa4efc98026c42f,2025-04-07T14:18:15.560000 @@ -292435,6 +292452,7 @@ CVE-2025-24323,0,0,ffa17705f25becff9fe39b0c783b4607448f2091a9eee643114cb4a9cce61 CVE-2025-24324,0,0,fb22b694f7ef6a445d2a623d2b54175dc6250abe88015352c2b05f76581afe5d,2025-08-13T17:34:12.350000 CVE-2025-24325,0,0,1beca91be03c20866fcc6f8f3e81598353dadac719427e8350ce0cca2c5ab1e3,2025-08-13T17:34:12.350000 CVE-2025-24326,0,0,976ea1241dba453c1c69c9675b3d1781720b6c9aec5d7aadca8a149300ac04f8,2025-08-08T17:05:04.937000 +CVE-2025-24327,1,1,b33a3bb03d407c1c5c31d304ad35896bbd01f15878e2e80690073b8e3c36a74c,2025-11-11T17:15:42.053000 CVE-2025-24328,0,0,a78982403d62cf956021bb6c7efa65f2cf4daded6d9829ecc859b17c5da462f2,2025-07-03T15:13:53.147000 CVE-2025-24329,0,0,a830e1b59bce5e51fb4628a7ef82529cf1955b00585488c4203a25d011924006,2025-07-03T15:13:53.147000 CVE-2025-24330,0,0,bcae8942880c363782c6f10cb7716f058ab309b7776a96d3657af4c7264da03f,2025-07-03T15:13:53.147000 @@ -292583,6 +292601,7 @@ CVE-2025-24487,0,0,6cfb50534b9f66df8c6ab5b7fd99a29e22eab1acb6c93c8413ece70cd6d8b CVE-2025-24489,0,0,9151ccba4f5b9b8ae2186e49939a36e4846cbe28cd5dac0f43cd3cb4ba924564,2025-08-22T18:08:51.663000 CVE-2025-2449,0,0,ddc1d4d3f3b793420c332d57b1a9afaf268d578d1608c10d7956e34c36e9b0bb,2025-08-18T13:56:42.483000 CVE-2025-24490,0,0,48daba0299796482f88807eeb082ed9f18085c357df9dd6ff30561f913d8645a,2025-10-01T18:03:04.270000 +CVE-2025-24491,1,1,6f6584d1e4f3464514dd0ece9ca4b017c08f5428db656a3136e52e436213f925,2025-11-11T17:15:42.217000 CVE-2025-24493,0,0,298eb27dc0376e2d1b1693184c401bdf75815d40d2991bac7663d0fdf9955d90,2025-06-09T19:07:08.100000 CVE-2025-24494,0,0,43ac2d60a286060ae572ec37f3d35d579c4245be449efae1f59958937f264e22,2025-03-05T16:15:38.937000 CVE-2025-24495,0,0,04923a5ce599d3cbecd25ce380379e9efe4597560ea4f0b5902fb1a1dd796b13,2025-11-03T20:17:56.727000 @@ -292601,10 +292620,13 @@ CVE-2025-24507,0,0,422b270ad7f0d60cc805efaa577ee203a8a40781b3fc9ddd5b1e3464f7401 CVE-2025-24508,0,0,be7fc742299934c7fe35e465eb888f93ba8b66bf94cf28d9c1bcb662bcc1d912,2025-07-08T16:18:34.923000 CVE-2025-24510,0,0,f4346618569231171deeb91837ea19c4a3ebf78d3ab4044ab040e0d8c41ae8cc,2025-05-13T19:35:18.080000 CVE-2025-24511,0,0,9bd71169652040b6981eb0f377151ec94450a79205848ea18aff886f89b7ebe3,2025-08-13T17:34:12.350000 +CVE-2025-24512,1,1,6892666c83952e61102449e4cf8fe19852d7ab5e16b2769a684978f73f551c48,2025-11-11T17:15:42.393000 CVE-2025-24513,0,0,5b2909cdc4d9edd3b9b9339fbb0e8afd70f836cbfaeace3c657aedea79661c9e,2025-11-03T22:18:40.553000 CVE-2025-24514,0,0,ad155bd00a7b56d9a561f9fac42f44d7210e150bd4225c89ff61a2ad5f92d00b,2025-11-03T22:18:40.650000 CVE-2025-24515,0,0,6abcdcf38797035d205df2a159b713eb91faa72b98ae854bd251bda88b93c4b4,2025-08-13T17:34:12.350000 +CVE-2025-24516,1,1,4886d01bcde3959768a7c1700b3f523b30ea1101e06415178b92908dc8b17e76,2025-11-11T17:15:42.563000 CVE-2025-24517,0,0,92131f25cdc7b580ee3c2f39a62649371095f9520a185b59d5123817df32924c,2025-04-01T20:26:30.593000 +CVE-2025-24519,1,1,a2657251c8fb03d1c2e432efb45559366dc60c360ad5ab0875f98ae435de8f7c,2025-11-11T17:15:42.740000 CVE-2025-24520,0,0,2a1a41d23f4a600cd4b924232ef580b5caff9d0c65d19c285084f734db50055c,2025-08-13T17:34:12.350000 CVE-2025-24521,0,0,8d587ccd83944db33992c871adfb713baf82b8ebec6fcce78327a7080ffb5677,2025-03-05T16:15:39.093000 CVE-2025-24522,0,0,774b6905ef05fda046ebd97df2e7e6fae8b8b6794ba902471a118744fc51e31c,2025-05-02T13:52:51.693000 @@ -292919,16 +292941,21 @@ CVE-2025-24830,0,0,149ce554396e6f6a2d01866c124b61e24002e40c9d6d50b44720c1d2e3007 CVE-2025-24831,0,0,c92da556f0147b9019570da06039147ae8945532d2deb083de9ea344daaf5414,2025-02-18T19:15:27.963000 CVE-2025-24832,0,0,6323ca18fbb7b250ae25bd8a26128cc938f8c40313999a5eb50edb4a58e57eec,2025-02-27T23:15:37.310000 CVE-2025-24833,0,0,cb6d24ac426d2400900a2b8b9e537910b37ab67a14ab7d8a565ca4eea8d80e21,2025-10-16T15:28:59.610000 +CVE-2025-24834,1,1,2d1139517364cbba885f1f184feef1f0b66fa17a64db40583404276aa68c6b0d,2025-11-11T17:15:42.920000 CVE-2025-24835,0,0,f400a00930825f62b3ee3a3b4ac348cc3df2c7ac11a9158a57bbed12ae02882e,2025-08-13T17:34:12.350000 CVE-2025-24836,0,0,2105a2b27eb3ab727652655fd6687e9c6f3ddb37ef353b640f3771eb913e5f22,2025-02-13T22:15:12.270000 +CVE-2025-24838,1,1,e41299af7970ec59d0aa4c9c3d6cd28d1023711a36265debadaeafbb855d91d1,2025-11-11T17:15:43.090000 CVE-2025-24839,0,0,0461285756b48ee72dd81e2963fb62b49981cc20dc76ffc7096efcca0e05d326,2025-10-02T14:50:00.653000 CVE-2025-2484,0,0,db81dd224fb04a4b222ed8145c9034a222c25b121346c742360e791dd95045f7,2025-03-22T07:15:25.470000 CVE-2025-24840,0,0,394b5b662e91baaedb29e0922dfd737dd073f496b6f47f938d2d4971ae4650d2,2025-08-13T17:34:12.350000 CVE-2025-24841,0,0,a2bfe696c59d71d61006c3347b2512e90c01384ccb7467de18b9531d5dd49072,2025-02-19T06:15:21.853000 +CVE-2025-24842,1,1,ae9179f6518276a54d2bedb897a4073049a9c80380385eaf45ff34fbfafe24c4,2025-11-11T17:15:43.250000 CVE-2025-24843,0,0,fb4d0afee0c2783ca1631e4031059d2c08004431e384816d6d85a2fa124d2f4b,2025-02-28T17:15:17.103000 CVE-2025-24844,0,0,09c9537782a4bb060c932370998f315033c7694b95fe1c89577d78360e0bb00d,2025-08-12T16:39:21.360000 CVE-2025-24845,0,0,b01e6a569b8cc3a4584487bdfb3da2fbed952ffc0174ca89c61a3e20ee1bf86f,2025-02-06T08:15:30.673000 CVE-2025-24846,0,0,395a1c47127c2c7ef37d1800a5094c8ea72456277181e4a623939a06fd6c82a4,2025-03-03T09:15:39.817000 +CVE-2025-24847,1,1,e044875c16c126140f509030a55027eb4f59ff7d95f71d3110863d3d97e4897f,2025-11-11T17:15:43.420000 +CVE-2025-24848,1,1,d5094cefbc74b8b03caf8100fe94ad3c6ecf310c998c807afa33855111895c56,2025-11-11T17:15:43.577000 CVE-2025-24849,0,0,8e5985d51102085b2b29506fc161cb28ee1a0b2a33328ea438367fccd6fa114a,2025-02-28T17:15:17.253000 CVE-2025-2485,0,0,e6cdeac6dd4d801a1bfc4de56968a3ec85e0b361298fc1c71f296fef05c57551,2025-08-12T17:22:25.077000 CVE-2025-24850,0,0,472de0f9b8177a2ff8a5c23dc6c66858f9548bfee6ac2f5fc53c56a74ebb6ce9,2025-04-16T13:25:37.340000 @@ -292941,6 +292968,8 @@ CVE-2025-24858,0,0,80a2e3e27ced5551413d1f52e03f6696ce40853726c2f8318cd2bd7389157 CVE-2025-24859,0,0,7ae63268ed8f6061889ef3699ff8e2b0990fb5a54f1b9202dc6890fa70d06768,2025-06-03T21:32:18.940000 CVE-2025-24860,0,0,51b4b011fbb6be85ac4dbaa67502dfd641408753a97dd7519ab71431204af0b8,2025-06-09T19:43:36.840000 CVE-2025-24861,0,0,cda35c31a52f18b1ea661e5db3735fa3ea7e6195ecdfe91c4593ecf77fb63f96,2025-03-04T19:27:30.983000 +CVE-2025-24862,1,1,7552486249bb15a220e2124d06b3a33c2cdf7f47c14bac717273e32d931a82c7,2025-11-11T17:15:43.740000 +CVE-2025-24863,1,1,a857ece271f34a621ef439c44c4875a5b624f1d89f329c76f802eb37bbff4405,2025-11-11T17:15:43.913000 CVE-2025-24864,0,0,03d90ee76247121aec5193d6e140b18b95834894f967758504c08d3025e47e84,2025-03-06T04:15:25.713000 CVE-2025-24865,0,0,a84aad4d5bdb225f0618ad62f2ff1ffe2c161de1be6dfd9acc81d2401125c5dd,2025-03-04T21:16:29.903000 CVE-2025-24866,0,0,6d7ceef35e19f837cbf1a609e7bd9b51a7ea692c8ee74ec6cf79106d0ad21bb6,2025-10-01T18:06:06.097000 @@ -292991,6 +293020,7 @@ CVE-2025-24914,0,0,aeade175f7df2516cde2132fd3b74adeba00ea4ec1ff88266e8696b3cf129 CVE-2025-24915,0,0,24c26ca53ef1e2928a50350b0dbd455453bdc6581f1752ca8926cd09252dcb45,2025-03-21T15:15:42.020000 CVE-2025-24916,0,0,9dac68af365157181cdfec311973a483121a3efdbe3e676dff821dd393b49019,2025-10-23T14:35:21.220000 CVE-2025-24917,0,0,a86b89bd562e21f9e91f155f6f5a4afc905d60806fdcb50cb8ca3ead3903fb95,2025-10-23T14:33:56.970000 +CVE-2025-24918,1,1,595a983df233d8d0357e1e9717b1d329896fe80ed4ea82820588309123ba8147,2025-11-11T17:15:44.070000 CVE-2025-24919,0,0,96e910285065769c0fa51c530e868f645432502b9d4fe1605af64a3471330055,2025-11-03T20:17:57.420000 CVE-2025-2492,0,0,50c487037d9367dd628709b7a18f8eb57d86cfa6efbfcbcf06bc80735a4d22ba,2025-04-21T14:23:45.950000 CVE-2025-24920,0,0,f7f8f763bf4982c0df509bbeae99871e92e5c9a0b38af941d8b9c06be0af01ab,2025-03-27T14:10:53.500000 @@ -293111,6 +293141,7 @@ CVE-2025-25054,0,0,5be11f7aa8767f62986e873818aa7bafb83a58f1dfa102f5a36254246868a CVE-2025-25055,0,0,715a07bb29b79c7fb7ed93b83baf8d9d3a9109839cf0cb0b13f9fa08d28e54fd,2025-02-18T00:15:21.277000 CVE-2025-25056,0,0,2442be758ebb20af39870ce02215019e1d15b2a21bc8cfcaa6fde055126de74a,2025-04-09T20:02:41.860000 CVE-2025-25057,0,0,935254987fe6283c3fe0dd69c35ed6fbeccca10f660c456dd976d461e3229279,2025-10-16T15:01:13.927000 +CVE-2025-25059,1,1,7f0ab9b1c10b393286f1d0eade4c5a51337eee28f9eaf7450e1ade1733ecf3cd,2025-11-11T17:15:44.230000 CVE-2025-2506,0,0,b5ebecd0001b859b96aca53faa2047a3f6b0d7dcc08540160e343e93775abbd1,2025-08-26T20:15:39.743000 CVE-2025-25060,0,0,8a64f3b5cfdbdb117dcf174c4cfa43f7826a569058296285ed9b2285a162d8a7,2025-04-02T14:58:07.527000 CVE-2025-25061,0,0,c6aafff32d7dd92169622d3756fd8e14fdd083a787d0cacea4fc235406d00f2c,2025-04-07T14:18:15.560000 @@ -293277,6 +293308,7 @@ CVE-2025-25212,0,0,ffd167f5754b5ff7de88d56fea222a6bb50835313f3329f891d2d859b84d1 CVE-2025-25213,0,0,4b306f44f1e5df4d081a6c0fb4426c0cd2686db9ca8e9c6904e1b2bea864dca1,2025-04-09T20:02:41.860000 CVE-2025-25214,0,0,af3b9ddff7b31f94207d3d0b1172a944edce569223a005241acbfdd59fbfc090,2025-11-03T20:17:57.957000 CVE-2025-25215,0,0,5ae10e2c03e05bd36ae6e7d860bf3c9ecf47372765e9bb26eccfa48f545d742d,2025-11-03T20:17:58.203000 +CVE-2025-25216,1,1,b47cf78772218fd44ed8e3f0578ce215a5577224c7b3ffae9eb00df3e89bf26a,2025-11-11T17:15:44.393000 CVE-2025-25217,0,0,946983f09842b611ada073cdbc9b879a3d7108893b9945dad8c0019f150ae626,2025-06-09T19:07:00.530000 CVE-2025-25218,0,0,fba0872e99b54dc5764f05bf49635253da00a326eff6e2ff854aa21ca321508d,2025-05-09T19:06:17.877000 CVE-2025-2522,0,0,aa6f8fdd2f233ed0887742c1f0101784acddafe99c28f84df7c2f0daebac7e57,2025-07-15T13:14:49.980000 @@ -293855,8 +293887,10 @@ CVE-2025-26399,0,0,21f920a6c40e726e85b5780e2fe82f7506a6ea9529ac905a8908e1ce288d3 CVE-2025-2640,0,0,cb1c6d71f05715e40a599d54b3e503bcebd1109fe2ad2ac7ebfd5568ea675609,2025-04-02T14:26:23.040000 CVE-2025-26400,0,0,fda6cdf1f15bf7f49231780ea426b86c4e638f068319ed4acc69fb94e1f79ff8,2025-07-29T14:14:29.590000 CVE-2025-26401,0,0,8a8a5edf8458e0cd9c5461b93aa3dd8d7a38c5486b82730ab0a36983d22db1ca,2025-04-07T14:18:15.560000 +CVE-2025-26402,1,1,06f388e38beead0f2587eafe9a0a4d3685b1c178f7d7fd874a5267f48c35aae6,2025-11-11T17:15:44.570000 CVE-2025-26403,0,0,11eb7e9772e1fae1cf88da9a8bbc392aa78434abd8ca94e011f2d92e15121b16,2025-11-03T18:15:51.970000 CVE-2025-26404,0,0,ce1333c7dbfc47693cdc705257eba0585087c303ebac1f6027893b6daf00cd92,2025-08-13T17:34:12.350000 +CVE-2025-26405,1,1,455a0b9218319d2c4f711fd308550ab251af89cf88f54d3b190c4f27cf7e6fe1,2025-11-11T17:15:44.733000 CVE-2025-26408,0,0,38c4259ecb8ce55383429abfa58888d28037e10945db676a6eb12b43b398a53d,2025-11-03T22:18:41.163000 CVE-2025-26409,0,0,d848cc060f44a8492011450ac6297d139128559ab904e74578da50b9d8ecad85,2025-11-03T22:18:41.310000 CVE-2025-2641,0,0,0c4e7f6e917c2684e1ef81919020337c8afbfd73d5a46107cea6f98fc25ffc5c,2025-04-02T14:32:40.757000 @@ -294142,6 +294176,7 @@ CVE-2025-26690,0,0,d2594e1d643d35c3b489b6dde390a3e2097cd6912a173266ebae67af23169 CVE-2025-26691,0,0,4011d199b9dd727e2e24e01c3836eeda9e3729cdca6d25d2a3ab75823101829d,2025-06-09T19:06:52.933000 CVE-2025-26692,0,0,254a0626b24ab412c5b839817131becc67f683a51ef18efa9c64e438fb6bbc9e,2025-04-29T13:52:10.697000 CVE-2025-26693,0,0,1f3e4b8c07fe200f515077f3d834b6b0cab24d0594d7faa790fc1a927c0510aa,2025-06-09T19:06:44.900000 +CVE-2025-26694,1,1,bf417b72ac3528156e8a26575ff4d8cac30db0db7a7c1028f541bbf24398172e,2025-11-11T17:15:44.900000 CVE-2025-26695,0,0,f077e716806e3aa11572737cbb762272530f7e8504d9bb6d9406f576cc783416,2025-04-03T13:30:39.037000 CVE-2025-26696,0,0,b9658e1d3c0f3dd4003407283a716267ae4de824c8808025c4c0cd47206d44f0,2025-04-03T13:30:33.593000 CVE-2025-26697,0,0,8fb45a02ed5502d1a6cb3d31e00010d79e099076e84a29d93ee5f6dda3080b4e,2025-08-13T17:34:12.350000 @@ -294646,8 +294681,10 @@ CVE-2025-27240,0,0,1afeb246d69edd224d3c1349d091f83ab1f7a63846c2b4b112ac30892ad8c CVE-2025-27241,0,0,5f3f6499b682ea2df4f525925370f561106f8235867d4ad8fc9ab0cd76693210,2025-05-09T19:14:21.627000 CVE-2025-27242,0,0,500974443f03ab0aa22535061e839a183b64d05d374ecf7ec2cd08c2cd5ec1ee,2025-06-09T19:06:09.833000 CVE-2025-27244,0,0,86fab9c76c6855c3f65d6fe655fad17ea7f4d78587bc5a57db26b5cf4b92bc76,2025-04-02T14:58:07.527000 +CVE-2025-27246,1,1,b6a6abc1485d53751d8ec99326cc81961a7c75f6144b0e750d9b8a5caeb2b24c,2025-11-11T17:15:45.063000 CVE-2025-27247,0,0,148270dc010fd46f24f2228b07b8ab3645189e4bba63f8757503d4c6d7652887,2025-06-09T19:05:57.987000 CVE-2025-27248,0,0,fecd2c1f71e975d5a7a66828a8b8c63d27847b5ba5cdc677ce3ae8da25e6ebf8,2025-05-09T19:14:06.030000 +CVE-2025-27249,1,1,4584d42d6fb7bbbcfda10150d9034665ed21d97dc39c47aa00d1ae09daf50800,2025-11-11T17:15:45.230000 CVE-2025-2725,0,0,4c49041f815970a2f0962172abde8e9b997e751be7cfde55bbadd432ffae1641,2025-04-11T20:15:22.937000 CVE-2025-27250,0,0,d47b840e61bded04c2cf73511b0d810ce34d14d4004b8bb452bdafa5b0b2ef1e,2025-08-13T17:34:12.350000 CVE-2025-27253,0,0,86bd1b86693245a925eac23cc395bebb671066a9bd214d10c7e777b8874250f4,2025-10-07T15:16:02.243000 @@ -295080,6 +295117,10 @@ CVE-2025-27706,0,0,366db5baaa6540a4830c30306563c995abcbb80dda2cc2e6aaf1e42c68352 CVE-2025-27707,0,0,f65c8981eec7fa87158c83b4f73785994aea5deb816f49e59b75a441a8e1db36,2025-08-13T17:34:12.350000 CVE-2025-27709,0,0,e728d7d87e90838ad32daecd7d2e548244e437cf88999400deba19e72b300319,2025-06-16T15:14:52.007000 CVE-2025-2771,0,0,6e9f6dd1f6dcbc8af278badc63ef11eb2bba6df3a4b96d00071e4cde17bf350d,2025-08-18T15:55:21.937000 +CVE-2025-27710,1,1,dc02f2db56e704b7773724f2b933f4ff7d4ed3951b969f54767feadd7dea9f06,2025-11-11T17:15:45.427000 +CVE-2025-27711,1,1,8e525ec5b4fd24c7e8aa9ba46066ad99e7d3ce2c672a1c88bcfe17272a351108,2025-11-11T17:15:45.600000 +CVE-2025-27712,1,1,9fe869a6f04e369868ed42ab1ea92af645cdf7a72de1ddaceb467fc857d2cc61,2025-11-11T17:15:45.770000 +CVE-2025-27713,1,1,bfcf912f5c10ee6e497aedf5eb6ec38b0b51fe7aac26310e031c9e37e111c557,2025-11-11T17:15:45.940000 CVE-2025-27714,0,0,70d7c2b39ad56e9e2e7d1385e40a44d6e0d949f6cafe269005129635ab0704b7,2025-08-22T18:08:51.663000 CVE-2025-27715,0,0,3945a29c5f5d17f328e68afe21b406dfe2951d48ca4e13bc184b7c24d7c6efed,2025-03-27T15:01:03.360000 CVE-2025-27716,0,0,65bcc3c5b3482c33d19a88cecf33eda0c46f0e6a542313f4127f96639786d02e,2025-03-28T18:11:40.180000 @@ -295091,6 +295132,7 @@ CVE-2025-27720,0,0,7a20a194ccb6121b1696e09244424ce12cb46102db4a7f6939cbf6f0f518a CVE-2025-27721,0,0,bdf46c69d013c225beb337b4c299fe3d045eddf5605ca279601f75a5291f8f0f,2025-08-22T18:08:51.663000 CVE-2025-27722,0,0,f6643ccc8a22899781482acbc064cbbf83bedfd8a0b28b0db307e860db0ae57e,2025-04-09T20:02:41.860000 CVE-2025-27724,0,0,89c6b51f1e7207d83eab35896cc6b903f15776178959f0af636ee2d090aa6d29,2025-11-03T20:18:06.937000 +CVE-2025-27725,1,1,5ede396c216c538165969ac68cfd7a5d1aa91e2da14271f7d36998cd86ade4fc,2025-11-11T17:15:46.107000 CVE-2025-27726,0,0,38a1ac46d0efea1df2b1e49f61f22cd8b30134b3fdb6141c216328e096cf40e0,2025-03-28T18:11:40.180000 CVE-2025-27727,0,0,22f89252c2d7ec6c7c3065f42712cf82fe7fadd7d6be9e8b4ea5f29254d80e96,2025-07-08T16:28:26.697000 CVE-2025-27728,0,0,85f32943decafaa532987da8c64de5ec23c42d4ee9e4eb992472a746533a809c,2025-07-08T16:29:09.757000 @@ -296268,8 +296310,10 @@ CVE-2025-30176,0,0,8d2a017f7a1203020bddb5f121bd24601bf34aa6885a5f376f77ebb33bf50 CVE-2025-30177,0,0,dd6bcf9daefbb6e1a68c3d702c2bf7abf53ae7032efaf201b8e1a6842e388876,2025-04-15T13:00:12.587000 CVE-2025-30179,0,0,e6188b5cfe41efd4be24afd0a9be97fe3cad7c2aaaf7dc5206b7ef410f616059,2025-03-27T14:45:47.520000 CVE-2025-3018,0,0,699e90ef59bc974dffc7069ff5404d401834f1962c8486f8c32f7bd651f7ed16,2025-04-07T14:35:25.290000 +CVE-2025-30182,1,1,360089d5fa91d2b9ebd7debebbce5147098867079d38fa542c58cb81a4917dd8,2025-11-11T17:15:46.400000 CVE-2025-30183,0,0,7bee93ac306b62ac86f055dc1627ff8ab4b0dfba12f958417a2c6907f9005be0,2025-08-12T14:20:51.827000 CVE-2025-30184,0,0,1d88338deabd19f31bc11b215e6d9be94ed6e9a44fdabe4d598a46beedc61e86,2025-08-12T14:22:08.940000 +CVE-2025-30185,1,1,50959d8b96288bb6bd239ca425735f299ae3210a228147d9b31463467dcfae5a,2025-11-11T17:15:46.597000 CVE-2025-30187,0,0,8977f1621452da4cbec850b2b1268d8de343686ecd0e724d101abe8db7590fb9,2025-11-04T22:16:09.450000 CVE-2025-30188,0,0,5a6d0ef88121456a3cb8716c140d9c8ac7b8ceab0eeb22493434e16d40c40f2c,2025-11-04T15:41:31.450000 CVE-2025-30189,0,0,63bf6b603b4b6422ed727f22c386b40f2e7f613243bc307263d4db2c273a9b18,2025-11-04T22:16:09.567000 @@ -296319,6 +296363,7 @@ CVE-2025-30236,0,0,3f73c2c498a83243d93d66190e1e818a0ccbcdd521592f269afac288686f0 CVE-2025-30247,0,0,5a8bc1f11e7fcedd2f1ddc3c075b0954d5e9f1762b26ee75600312b4f7886eeb,2025-10-02T19:12:42.843000 CVE-2025-3025,0,0,fa631b2d9ee47e5dd3b2cbb5b849dda3cee8b2f7c51836b3429b536712581c17,2025-09-15T15:21:42.937000 CVE-2025-30254,0,0,da1d16a46820d71900f53d810ce1fe1ebed01824c713861505ca6fc997e896d8,2025-04-16T13:25:59.640000 +CVE-2025-30255,1,1,c9fae81ab8f2d19da712ec938e7afa63933e50593c54ef8268fb98e8dea83668,2025-11-11T17:15:46.830000 CVE-2025-30256,0,0,e291c9ae778fe5e725234b78a1072814a2f73ec979bb3a636e8af880d490e0e9,2025-11-03T19:15:49.710000 CVE-2025-30257,0,0,9ccc3ed13a71d3b859385eaaebbd26fc6242cd3f0f494deb9f38d38761c8555f,2025-04-16T13:25:37.340000 CVE-2025-30258,0,0,c8ddd07c679f2fc52c3184b5e2447b81db93143c2ddec54cab8aec241b16c239,2025-10-16T16:53:07.557000 @@ -296455,6 +296500,7 @@ CVE-2025-30392,0,0,e7782c228af65504c4083e4f8db90e701cc78335a620067d50e303d231511 CVE-2025-30393,0,0,804fd6a0256fde9907b05970b6c69419740b94df91cdd08cb0b627f4c4bc04d4,2025-05-19T18:33:21.170000 CVE-2025-30394,0,0,f1de03358ff12e4be92ec2b475144b0d841af50bcedc0c6f1d65d6f2cabe6b56,2025-05-19T18:30:32.980000 CVE-2025-30397,0,0,2392dc630d32fb0abb9b9b38899366470d53f28aa7271530a5ec7752e56bf4e4,2025-10-27T17:13:37.647000 +CVE-2025-30398,1,1,a430f2a8118e8b4c0cd4b96f95563bf22ef45e18131e51bdce0781fe24200f20,2025-11-11T18:15:35.107000 CVE-2025-30399,0,0,3b9e273abae101f3ee89bc71f500cf69ff6c3891c81b5ace85ac10a51648cb03,2025-07-10T14:25:37.313000 CVE-2025-3040,0,0,53936a38c9f156c87457c8c25cc199950632948c72cb45a3e04fde596b8f82d9,2025-07-09T16:17:32.263000 CVE-2025-30400,0,0,802c554202f29034be60a44e076e908b129270e38652798933072b72864fac26,2025-10-27T17:13:34.180000 @@ -296539,7 +296585,9 @@ CVE-2025-30480,0,0,86d04e978f986f35ad71b19d36fa1144784ec83896a38cac0d9fa4e8be26a CVE-2025-30483,0,0,264afaf518694f5f3a404d3584f47391a3e4d1ce9c36a62940715fdaf6826a3a,2025-08-02T01:26:33.697000 CVE-2025-30485,0,0,f2856ee96c6d55a594aa71df88615bdd59c4c1a0f52dcb79297759def1147103,2025-04-07T14:18:34.453000 CVE-2025-3050,0,0,fc15ad23bd9afa2f65532303fa5ace006644959019c36eff80cd9adece20e167,2025-06-09T18:59:36.360000 +CVE-2025-30506,1,1,af7ad0c283464f6d189c6cc8e160f17c86512570a83fc4c6e29c120f0b1ff04f,2025-11-11T17:15:47.097000 CVE-2025-30507,0,0,614d4995b5f0550eed5d45fe4f9db6a44cf8343540210581d9cbc4d3d8abea02,2025-08-12T14:22:01.437000 +CVE-2025-30509,1,1,305da31771725e170b53b8166eba923f4cf1547fd8d865c3f95605402dd6f704,2025-11-11T17:15:47.267000 CVE-2025-3051,0,0,03f9e07d76193917b8de9d74f13ff070438d20cd42142f9b8ee6c497180d4b37,2025-04-01T20:26:11.547000 CVE-2025-30510,0,0,65385fbb77c3413b4dbd5af09bd8095b856fda193f49543e9bce544dff1a2627,2025-04-16T13:25:37.340000 CVE-2025-30511,0,0,8563c461353588100bf079ab1328ff6e11ab2f047bd1165d78f20b19233b493f,2025-04-16T13:25:59.640000 @@ -296547,6 +296595,7 @@ CVE-2025-30512,0,0,830ca9aa3d060fbfd3176f9d9f5c7cd3b5eb14a6890ffb225ca2f7e33b59a CVE-2025-30514,0,0,191fbbadf6252574a267c8157cf87ff8e05e4c53e45be9178ae9e940181c57b2,2025-04-16T13:25:59.640000 CVE-2025-30515,0,0,0bdc9a93e8c0e9cf9ad899e21139961b293dac3f6f65ebe057c22c6d0bcae086,2025-08-12T14:21:22.130000 CVE-2025-30516,0,0,4c4010735eda5022a5e601e0feb64fdc03615b127a1821c7591d69606545d22f,2025-09-24T14:57:30.170000 +CVE-2025-30518,1,1,683bbd1bea5097c23ad981f1f3d1b0b3c1512429a84a0bfd3353e961a3d66990,2025-11-11T17:15:47.433000 CVE-2025-30519,0,0,cc35a5a5959688d8fe7cefcc2187485c88d5b04bab9b8fdb766f402defd0e34b,2025-09-19T16:00:27.847000 CVE-2025-3052,0,0,511a24e9625cafa606d404e95aa19cf71339f916486743c0cb029d619f95c7c9,2025-06-12T16:06:29.520000 CVE-2025-30520,0,0,36202f4247a4e2c05ed8fe3c2794dc6deb26ec20b4118dea06db3314c5e3a395,2025-04-01T20:26:11.547000 @@ -297207,6 +297256,7 @@ CVE-2025-3114,0,0,418d9b2c4c39970a6b7c0e8549739605f4addaf83e877938cc0f3fc3ab0c15 CVE-2025-31140,0,0,c54e1da821f15b88c77ec225baf5cec8c1c33acbd8f27c5c1ce9d21432ba5843,2025-05-16T14:51:08.523000 CVE-2025-31141,0,0,fdf8b65d0398f5604032ea500e1efd4ef3165adf25ebb1cbf6d5791a08d2971e,2025-05-16T14:51:04.257000 CVE-2025-31144,0,0,c250fdf328ee74061a9d52a259b43ae4d05dc83889572b3d2df6bcba1de40634,2025-04-29T13:52:10.697000 +CVE-2025-31146,1,1,1129c10f0f507365621342b379ab62039b681e4282317f5c76d4dcc8f24a6d35,2025-11-11T17:15:47.587000 CVE-2025-31147,0,0,b4b9372e5c8a5e40ec0d018e08c7d412a3cd39ffe19cf8f186844b6fcf8ffb0e,2025-04-16T13:25:37.340000 CVE-2025-3115,0,0,2d6e81e5fa2850c1ba0804f51dba2c565d19df2b2d02b210bf8d33b4f65d67d3,2025-11-11T12:15:34.360000 CVE-2025-3116,0,0,91b3b99e9f8f9dfe2cda922a5e4c54c6bb3f82e20f91cd7f6b78ed14a05e0088,2025-06-12T16:06:39.330000 @@ -297662,6 +297712,8 @@ CVE-2025-3164,0,0,f430347d00566ecabc1456225b754db04a6b786f314d5bbdf398f229ee8b67 CVE-2025-31640,0,0,b95c11046ffaaf42b7ced892b21882c8ce81e7ddd1b71a6685d7e097174184a4,2025-05-19T13:35:50.497000 CVE-2025-31641,0,0,74f2d472c03da6f55fcc5070d5a61148872d3ce81a5c7f7f28e251768bfd7d2a,2025-05-19T13:35:50.497000 CVE-2025-31644,0,0,1e9f90c58b18945ff531f3d4b8f92235ae5c92208756d1d32d2dace379dc5baf,2025-10-21T18:42:36.423000 +CVE-2025-31645,1,1,b9c8efa938ff29c7f1c6caa8b5e2fed5721ba318e4ced82225316b590a173563,2025-11-11T17:15:47.757000 +CVE-2025-31647,1,1,dfac0813c2272a1bfc45d54c5f03df54484ec7176bb64ded889f0447d886ee59,2025-11-11T17:15:47.917000 CVE-2025-3165,0,0,2e02105ce99f3564dd878406ce8c0b7835d84010bc4a7c0c3ba88c3a6192f2c5,2025-04-07T14:18:34.453000 CVE-2025-31650,0,0,a1e4a84557da4c2397878c26c0531fec0aedc4af282e8e738a9d3ba124299d58,2025-11-03T20:18:25.740000 CVE-2025-31651,0,0,7bdfc914af34d7857b2cfb5604ea704b72e3c18c8b56d3105a45985fc88bf0d2,2025-11-03T20:18:25.927000 @@ -297945,14 +297997,18 @@ CVE-2025-31928,0,0,08f979cbba3b265f9dddb8e656b44f77824c3181854c61f17f3d259333afd CVE-2025-31929,0,0,502b54bda776348d0cb5323658228b220fd4e8c63c9e27bd016d76cab99d553a,2025-05-13T19:35:18.080000 CVE-2025-3193,0,0,4db21c8c2142dfc2ca8f4c670c01e9bb13c3fa323701155221760910684feccd,2025-10-05T00:15:31.013000 CVE-2025-31930,0,0,4616ccf773a293d3c7b3ef57e4668dbecf0b719fdfaf6605933aaba839c37bef,2025-05-13T19:35:18.080000 +CVE-2025-31931,1,1,c906dedb3fb706538682aa99becc038191bd61478f031ffd133e4cb1ca3e0d6f,2025-11-11T17:15:48.073000 CVE-2025-31932,0,0,362dfb3dede0e01aeba8ae3f507453eedf01ad64b58b11b9af4da649bce815d6,2025-04-11T15:39:52.920000 CVE-2025-31933,0,0,2a61b61203ec683549113bb16960e9aeb58172d005b123a154e689ef3beec5fb,2025-04-16T13:25:37.340000 CVE-2025-31935,0,0,0d2ffa9191d32ef4ed5756cb430a8e3003b597b0c824358da279cefe4304e278,2025-04-15T18:39:43.697000 +CVE-2025-31937,1,1,1b5e3a528907b8dfd2f4fa73c85bac094049503a6312f474b06374349794fd52,2025-11-11T17:15:48.243000 CVE-2025-3194,0,0,23a5c95379b253424e9febb0b842b536dd2f8dd3324a3c76cbac09d82342e603,2025-04-07T14:18:15.560000 +CVE-2025-31940,1,1,f14a750b73f54f390a6540a6715f266f5182689f8158d54cc4a6e58d3322e726,2025-11-11T17:15:48.413000 CVE-2025-31941,0,0,29bc49fedf031151539c0dbaef611b89965ac35da910eb4b812a785b6c68c30d,2025-04-16T13:25:37.340000 CVE-2025-31945,0,0,e363e3d97604f53150fa4a3a546fa69abe62e1d0d4e8340507297aad74b6c6af,2025-04-16T13:25:37.340000 CVE-2025-31946,0,0,87f2e8caef4f383022510305742244fdd62fefbc745116cfad148dcccc84b1e7,2025-05-12T17:32:52.810000 CVE-2025-31947,0,0,bef4a61ad2f5ee198864b0fb97291f8e7e2fda0e7f5f00634908f05e036a93ee,2025-10-06T15:30:17.227000 +CVE-2025-31948,1,1,16465f27df7b9e6c743f912724d223ee9c6b81bb4073dbb1a44198b7caa46851,2025-11-11T17:15:48.583000 CVE-2025-31949,0,0,04e674161e866304240acb145291660b9b3f1e4d7b002c2903be172476121e53,2025-04-16T13:25:37.340000 CVE-2025-3195,0,0,93a6c89bac6b891825aae9732fe4ce25fe868ef9ef97cfbba20606c8bcdcc376,2025-04-15T18:49:36.733000 CVE-2025-31950,0,0,ae4037468931b312cd6a0f1e462daaa883a2ff6a14f26c331c4565822f400cc4,2025-04-16T13:25:37.340000 @@ -297981,6 +298037,7 @@ CVE-2025-31996,0,0,66163f5cbd08b410c75f053517c4203ee708b00ab9f76a575722cf4adb51c CVE-2025-31997,0,0,9690fa69ba964be882b737d67f3520431cdeb9c96bc2b9f3619bab10a5b34ab8,2025-10-29T17:27:23.037000 CVE-2025-31998,0,0,8d1b31543dfa427b49f97ef5d1d35c572e59da5b3c6ce8984a64d3e29e944e88,2025-10-29T17:20:08.280000 CVE-2025-3200,0,0,e6d1aa16add34c820864a3d6c718e90502c6669aab7d22ef7eaf272e8427c425,2025-04-29T13:52:10.697000 +CVE-2025-32001,1,1,7efef363bdec1aabf51b03aa8638ad33ce62bceee16dac5031fae1ed6dcc363c,2025-11-11T17:15:48.743000 CVE-2025-32002,0,0,6b5ab1cf8580e7656afcd02894d21fbe64ddbacfdb899860d71b3883bf83bdba,2025-05-16T14:43:26.160000 CVE-2025-32004,0,0,c94f9b2c8cc262f4e3f847ba40cd498bb25ec8cd46bafbe86fe2b693c91f1bb0,2025-08-13T17:34:12.350000 CVE-2025-3201,0,0,ff345e2adacda8ece03a7ef4278c83629d491e724ba40fdceb88b8907e54830f,2025-05-27T19:50:29.157000 @@ -298013,6 +298070,8 @@ CVE-2025-32033,0,0,40b3b208d052d7879d2f8f3adb9e51b46b4a05b975f75dca712aaefa23ec7 CVE-2025-32034,0,0,39b72df89785b876c4ffe3d85c99f5c70d32cc05dfbbbe1938fd282aa04ebea9,2025-04-08T18:13:53.347000 CVE-2025-32035,0,0,35ebf880ff5e8e6319fdd92dbd48b054a09b66682162a2200586d6b99133c6a5,2025-08-26T00:54:51.967000 CVE-2025-32036,0,0,5fd820486634f376188f7b63af5dc62253d95ff9890af98f637eea31bd39810e,2025-08-26T00:50:57.373000 +CVE-2025-32037,1,1,c9f57c7952433f8054668ac51457c141cee28648fefe9191ecaedf1e1f1e9a13,2025-11-11T17:15:48.907000 +CVE-2025-32038,1,1,744fc2a39314ebc294637575dc3b9172230fcfd925fc3622c2e2347a0c0257f0,2025-11-11T17:15:49.073000 CVE-2025-3204,0,0,640564153dde48d17342c52eff358ea56840605e43f6aab84cda78f222b9e0c5,2025-04-15T18:48:43.403000 CVE-2025-32044,0,0,16b7f4038b70442f5c58b038e6ff8d0216293c8771ecdd77349da864d5763463,2025-06-24T16:16:26.330000 CVE-2025-32045,0,0,d4cc61c04350ac46c4b7e26597268c4ecb33a497534cb33f9ca86095245b6d76,2025-06-24T16:17:05.870000 @@ -298041,7 +298100,9 @@ CVE-2025-32079,0,0,3799f302333918e4fff219af165e858ca2b9a65389cbe99c4b14ffaa59464 CVE-2025-3208,0,0,467c67ee8369e3212684108818f80d158b2f4485a63647368e73220138caff6d,2025-04-08T17:48:42.087000 CVE-2025-32080,0,0,476f6d5f06fbb960cd093fb065cf3625046fd24147d1c1820490adfc187e1786,2025-04-15T18:39:43.697000 CVE-2025-32086,0,0,d0bade7264b46f83fe2a5d139b1b3223b79fc5dc67e85adcf5c6764965b156cc,2025-11-03T18:15:54.380000 +CVE-2025-32088,1,1,1bf80ec1523ce3413c33a68cebf7f2c52444ca5cebace75d43dfdfaad717f6d1,2025-11-11T17:15:49.240000 CVE-2025-3209,0,0,67195a835acffe5135c80a3d8ad9cc228d886a4b156f30c4554a13ec4114273f,2025-05-28T16:07:37.803000 +CVE-2025-32091,1,1,5cf829dadb1851f5e58e31341ca72ef0586b1ca6a748cf53a7eada83bbf8b25f,2025-11-11T17:15:49.407000 CVE-2025-32093,0,0,f931012036e0d0ab9d1dc10666dbf9a98ddcb4f48a184cc67ee48846c25ce091,2025-10-02T15:02:34.290000 CVE-2025-32094,0,0,9f405f51680a07e7bce53bef27776ef3cd8d86cf2c7b808cef0066d04ab0add6,2025-08-07T21:26:37.453000 CVE-2025-32098,0,0,9aeb6eb7b3c2b7675deac4e5e2afef2997e96369bdc0f918a9ab6e6d4b0c02f0,2025-09-05T19:33:29.087000 @@ -298371,6 +298432,8 @@ CVE-2025-32441,0,0,12603f2d6ebdb3d224734288a6ec55dd99e6ec0404f09faa29d26745252d6 CVE-2025-32442,0,0,b1d6c34d2904041c4ccaf9b63c543fa74950c56f13b10cac3e33dc7d1baf385a,2025-08-22T21:15:31.630000 CVE-2025-32444,0,0,288296e03a307a0b00958513c50a8127cb3324308366d3af8facb6f4548c84d7,2025-05-28T19:12:58.377000 CVE-2025-32445,0,0,1b5ba881d2838c8e1a17201ae0d99d597a5e3f65b98d8fa06e156c1abb87955d,2025-04-16T13:25:59.640000 +CVE-2025-32446,1,1,f84fec629a0c5e473ebf246c335cbea17fc59653c91def3ad4888835c298d421,2025-11-11T17:15:49.563000 +CVE-2025-32449,1,1,2cbf43877a0cafe6c157e642fc5225fe715af26c6e601aecae4baf6549ea55ca,2025-11-11T17:15:49.723000 CVE-2025-3245,0,0,34513d96925346b7609d27ec32e42dfc8926b8b7247f00b351b24b6c6848fab4,2025-04-23T14:51:07.013000 CVE-2025-32451,0,0,35adb87c938488c94fdd31c4eaad126bbf2c9b45289dab3da029b5b7c2ce64e8,2025-11-03T20:18:27.500000 CVE-2025-32454,0,0,4e2fd234003d0acf3ac73e5375e0da92d5b238fdc55fda5aa26e74d8ec911088,2025-09-23T15:26:08.277000 @@ -298668,6 +298731,7 @@ CVE-2025-32726,0,0,1b878ab7aa620fd80dbc0cc7d7c12091c57b07913d559ef424a18607b46d5 CVE-2025-32728,0,0,5aee560e966fe76dd9048a3df7563795abff4e2cd132941a1a731b81d94d6a0e,2025-05-22T16:51:54.890000 CVE-2025-32730,0,0,44cce1a9327b117b4904f0c237377c22ba67547a2108fe2d846b0c147958e156,2025-04-29T13:52:47.470000 CVE-2025-32731,0,0,e6ce272eb12f5ba45cf327806c6ba86f62ab067ed3e90b9909222ab6aaefae5a,2025-11-03T20:18:28.190000 +CVE-2025-32732,1,1,6a4e6e6ce1f0d7ffa3d474e1e3078e843a8373b9a693b61a13a0d1798cdc5c01,2025-11-11T17:15:49.890000 CVE-2025-32738,0,0,1e4b18eb00c7b6445b0a47ae38d1453a38fd33cbb9f422cc0f1548fbc1beb4ae,2025-05-16T14:43:26.160000 CVE-2025-32743,0,0,22cd88375a4ea091d730f6e11751ffcb7fa9bb31f6c5963a03a37755aa77afd4,2025-04-11T15:39:52.920000 CVE-2025-32744,0,0,79a22a96f754707d8db68a3e76dff26074e7980c1a050f4c08e3951c33f8af54,2025-08-06T14:32:12.707000 @@ -298916,6 +298980,7 @@ CVE-2025-32996,0,0,44b03681b27714100d4188a860d77e764119a0a8b23389da352345dd35fd8 CVE-2025-32997,0,0,c6e4e0f07691a9ae636c163b71e1eab155b58cef89815bce18d2c3cb38388701,2025-10-21T14:42:43.637000 CVE-2025-32999,0,0,df6066ed4a52f19ec8a77de1e120b3936cda4a35ce2dc17d8616a7ace501f1f2,2025-09-30T19:20:42.570000 CVE-2025-3300,0,0,71838a45e38cfd4f9033706465f5d20314584bcf58aabb1bb7ca5cab40d52129,2025-04-29T13:52:47.470000 +CVE-2025-33000,1,1,7d2b12fa72122f1dd5a417f1ca7946d05db5a06f46e238dad34de36c5b1fa953,2025-11-11T17:15:50.057000 CVE-2025-33003,0,0,89ea07c48135182b29a2d90a8b745b20dc171476660a434f0288b12e079a33f4,2025-11-05T19:52:28.500000 CVE-2025-33004,0,0,25ef1cacfc55679caa991fe4dacafc9bda9795da6ed1d8f7182b25d804d5e7f3,2025-06-09T18:08:21.600000 CVE-2025-33005,0,0,be550a5e2ac6a35d058e8160e960be9ea02dfa43a6b1cb81703cad86809f091d,2025-06-09T18:07:39.407000 @@ -298932,6 +298997,7 @@ CVE-2025-33025,0,0,4b295e88dd02f429bce7f4aed7e0b1b7ea585aae960bbc6de9d4364036c40 CVE-2025-33026,0,0,50f96ef4cfbe92a7663c2cd729e26c5311f0763ed75d827fc0d8906758ddcf7e,2025-10-24T20:15:54.240000 CVE-2025-33027,0,0,8fb79f706786b5d84049f38a2f1f9227ed4e8435cd57b1ccb2cdfdd2fa32ae63,2025-10-24T20:16:01.833000 CVE-2025-33028,0,0,f5222bff7f7faedd32a0dedbd371752afd23fb9a09f1b13d15f9f6688017ea0a,2025-10-24T20:16:08.937000 +CVE-2025-33029,1,1,9227501881e1f4d6cac26c1caddcaef6853942a3179b14838e41bcfc9c70b45e,2025-11-11T17:15:50.217000 CVE-2025-3303,0,0,a88559a89b09c7db23c32ee2c85028152291b57ba44bc3a0730626f1d4cddeda,2025-04-08T15:02:36.210000 CVE-2025-33031,0,0,d4474ed41a9e907cb9a71f95caeade349bd99e131c8e5be776d26f56137e82b0,2025-09-17T18:50:32.177000 CVE-2025-33032,0,0,dc2889e40c982fd3bf49a7887ad70dbb3bf7d4169ca48d57cc2048ea4dc8b13c,2025-09-22T17:26:48.183000 @@ -299024,10 +299090,14 @@ CVE-2025-3316,0,0,3e88a15102379c98d458fd3db7b2ca0fb380819b90213305e7a63c89acf484 CVE-2025-3317,0,0,84bed38c4aad4d99a9bce86e0f0e19796582a61c410c9b717a7aa8eff77aaffd,2025-11-04T18:56:18.017000 CVE-2025-33176,0,0,7842dad454e2280475318a1f7afdf61a9ea2e1d6c16d08f09d80467ccd4b95b0,2025-11-06T19:45:30.990000 CVE-2025-33177,0,0,edeb6348c0e10a51ac07b4119267b9936814302c730069fdad7fc6cafedd261b,2025-10-16T15:29:11.563000 +CVE-2025-33178,1,1,04bbc67976f58b196c766e9ed6c6bbc2f6196c8e1975ea60ba3987107969af80,2025-11-11T17:15:50.370000 CVE-2025-3318,0,0,d41455da27266d28e58c612e5331d057733e012f908834dfd039a0c35f682aa4,2025-04-08T18:54:37.387000 CVE-2025-33182,0,0,e33d8f832b7bc23f9bbaa03184f94bd97471143ba69d9ee7ffd66b6316cb15f0,2025-10-14T19:35:56.913000 +CVE-2025-33185,1,1,cc700ab7dff2bae8f459a0da29693348635a81933e0a87c26ec4d064552df837,2025-11-11T17:15:50.530000 +CVE-2025-33186,1,1,b9b27275d4a9000219d1aa467d3916c7195a8f6408f9fd95f81fb295a7367e38,2025-11-11T17:15:50.687000 CVE-2025-3319,0,0,880669dd684e57eb526d867fa799ce3f0c621351af95b86a7eeee725b908de94,2025-08-13T14:06:26.170000 CVE-2025-3320,0,0,9c9fb8b0999e57b36e869ce979ce2a8716f328620f29fb25e1ba242e2f5cc191,2025-08-13T18:23:14.230000 +CVE-2025-33202,1,1,2e615100b2c1389c14082577da8902dd612a57b2c340cd48ad8b8a4d32fadbf7,2025-11-11T17:15:50.860000 CVE-2025-3321,0,0,89d868b8d250added45655d72ea2e65287b449d3c34ba73a6afed017784481f1,2025-06-06T14:07:28.330000 CVE-2025-3322,0,0,f0dcb27ae649e2e32a0542a650a4f4519c5c6283689d5361b5eebd4d72375401,2025-06-06T14:07:28.330000 CVE-2025-3323,0,0,c423f8c5cef14afbc303251e4fb6e963db76a7a33a35fe5af682e0151d3c1270,2025-07-17T18:15:26.953000 @@ -299615,10 +299685,15 @@ CVE-2025-35939,0,0,254c828bc74484181ff9abd0d226ca5a4221ee170430940e23cb285e59c75 CVE-2025-3594,0,0,26b99b5650ec88f178e123dd68f68bb7272812dc8f174965272ac280387e7512,2025-06-17T20:50:23.507000 CVE-2025-35940,0,0,e1654e3276007056a3379a8c96a5fd620ef740e098f060ffb7c970ac065807be,2025-06-12T16:06:29.520000 CVE-2025-35941,0,0,c0f1005dafa96731728190c01e1c58a3d64892cc0becf767662ef579b6bd3552,2025-06-12T16:06:20.180000 +CVE-2025-35963,1,1,6c8f4418701aeb5b0a253d17842b6e4e2d24458f35196623ef44c1104df1a389,2025-11-11T17:15:51.020000 CVE-2025-35965,0,0,26f7088b593f2abc171f045f709527fef59eaa9c32888b33f8757084b84a1f9b,2025-09-29T21:10:29.280000 CVE-2025-35966,0,0,679ffbea9d3df91579e8c0fdfc52938e751101823ed56979613ff3282e7642f0,2025-11-03T20:18:30.250000 +CVE-2025-35967,1,1,630e921f0249e3bd2327fb166eb46c3392d5be38922c89a000fc120b498502c6,2025-11-11T17:15:51.187000 +CVE-2025-35968,1,1,7fb2eb4c7f66d6a1dea511a56aea2017c5aa7dbf576febb91d932a18cd8e0d54,2025-11-11T17:15:51.357000 CVE-2025-3597,0,0,d7f16eae83f55d018cc2fc04d9f80eccf613371d509c7f99733ac01645d2c6f1,2025-06-05T14:27:53.477000 CVE-2025-35970,0,0,bb7723f512185ca64c2587ece8d1c2c48aae3fd031d6ca117bacff51beb58499,2025-08-07T21:26:37.453000 +CVE-2025-35971,1,1,37749975424cd206d76d7eef2c77d9b383fa45bbd712873577c87d15e66f7568,2025-11-11T17:15:51.520000 +CVE-2025-35972,1,1,cab48ac0c3e46e38e03077de5191ec1d46f8b955d796f4f88a1e8b7e2b9efc2b,2025-11-11T17:15:51.700000 CVE-2025-35975,0,0,ff6f53919e1d0edd41e3d119f9454f71c4e7dd5f4908d853817e3fb24cd36fe2,2025-05-02T13:52:51.693000 CVE-2025-35978,0,0,d19a68fa8a22f5aafe0acf8621336fc3d5b9cb0dc7ee220fa97e8380dc405dd5,2025-06-12T16:06:20.180000 CVE-2025-3598,0,0,70b9a8b9865ad46cd7a5f55390c31e93b9d1bfaea80e4e73f88e90a6585b45a6,2025-04-21T14:23:45.950000 @@ -302876,7 +302951,7 @@ CVE-2025-4304,0,0,6f1b91465a276129a41d4871b4c0d6efc81ef52ea3bf5203539481683a02fc CVE-2025-4305,0,0,b58ac1af9a831c4de839666746ce16b1183ed9c0a0c34755aad0f80402b5eab4,2025-05-07T14:13:35.980000 CVE-2025-4306,0,0,47922af8efefcd58c9179aa2cf214e6d147a6315a6a644b76d8c7b05770f6f85,2025-05-13T19:21:25.277000 CVE-2025-4307,0,0,968e09c51eefce90b73255eef2ef9cf3254087c66b3b8e32ef5d5e2a02eea504,2025-05-13T19:21:10.793000 -CVE-2025-43079,0,0,0edef4d3c84ff02bf376b4e1b459f197ccbece7b00b14c7c484241645baf0a48,2025-11-10T18:16:06.420000 +CVE-2025-43079,0,1,23229f13cd207cc1feb782f02d0c85232663cf71f04a677f66d584c4bc55405f,2025-11-11T18:15:35.277000 CVE-2025-4308,0,0,64773d5df5c47df8e574ab96bce10ce5262699f6cf6654bab1833a7a94d6b810,2025-05-13T19:20:51.480000 CVE-2025-4309,0,0,c529fb402aad41bda7512ef22da31e7ef2a24da2d6fcd8aca0ab1ae416949061,2025-05-09T13:37:21.743000 CVE-2025-4310,0,0,a8d911a03bf6b626b015394a304b3822e0dc653949f6cbaa3ff0211b84db0d22,2025-05-13T20:21:51.787000 @@ -304960,6 +305035,7 @@ CVE-2025-47174,0,0,f8f7f94ce71e2d5f495c1c63f0038fe4f27aadd724d01809756abf22c5ef3 CVE-2025-47175,0,0,7de552066b70205e6375bede7fdd709c7bde372994a82fbb276fc1ed9fc038a7,2025-07-09T13:27:42.433000 CVE-2025-47176,0,0,d5024465ca52874cf0a4883f1ede98b76c7f64792ce8de66ef4e198a8bb58837,2025-07-01T16:50:53.030000 CVE-2025-47178,0,0,1d066dc6f384c6c9541ff7c1bd9fd9098b33c6306ce85c7a464e52a6930bf2ca,2025-07-23T18:30:05.453000 +CVE-2025-47179,1,1,15b922822c476df3ecc509a166b190a4ff7d47154be556d4b134bfb7e612a625,2025-11-11T18:15:35.397000 CVE-2025-4718,0,0,e197120a33051d36a3bdf1b0305cf7de5c5f5941a30eaf0eb2f8e25b8c33d5d8,2025-05-28T14:26:27.280000 CVE-2025-47181,0,0,0dcaa7da62eb599bc0c4884b7faedf2756f0f5de47436d94bd3a1a0bf83ba2ad,2025-07-08T16:18:17.580000 CVE-2025-47182,0,0,53f87a273acaefbf1eae69d26a4ad76a0c6e6a7e45d884bb8dfa99b5c8575b00,2025-07-17T14:39:42.343000 @@ -309383,7 +309459,7 @@ CVE-2025-54111,0,0,065af1f8c57ec65c9587be2c25d7641f322a1335e50440a83f4e7eb7f9c29 CVE-2025-54112,0,0,726ccbf8b06af4d748dac144efb2907e1812b3346b933e00bc8a04230484ee30,2025-10-01T20:17:04.217000 CVE-2025-54113,0,0,d9ba950b754c9462847d65be3623149986e9b3e1c58a7b3e263e56d9f0918db2,2025-10-01T20:29:39.270000 CVE-2025-54114,0,0,2187a6d7cc09fbd10a87e36bcab0120615e97d0d8ddb015fb886b6b97538069a,2025-10-02T18:02:19.817000 -CVE-2025-54115,0,1,161f51a22f7975eb13ac75e1ec60fcdf5add735feba6fefd54904c8e3ce7e5da,2025-11-11T15:15:36.177000 +CVE-2025-54115,0,0,161f51a22f7975eb13ac75e1ec60fcdf5add735feba6fefd54904c8e3ce7e5da,2025-11-11T15:15:36.177000 CVE-2025-54116,0,0,c2868d7405c295a159abc6a31f0fe57a699bf7d2f3996ec5efab7d9602c52bdb,2025-10-02T18:03:02.620000 CVE-2025-54117,0,0,d016aa9738976980cd83be60fa056d0e264f3ba30213783d464c36deb9d6ed29,2025-08-20T21:23:49.083000 CVE-2025-54118,0,0,40ca4c7d11ed039694d51d670003cd0274e50e82b689d31818cbcfc0bc7f8cf0,2025-08-20T21:23:34.290000 @@ -311897,7 +311973,7 @@ CVE-2025-58720,0,0,801fa46681d556b580577a9236aa1ec2e5f9e70fe582beb32b6a206eae1a0 CVE-2025-58722,0,0,9e70275c29c5bf922c41e9b241211d418206d8cf0fbbccad9e0f76088fd63ff5,2025-11-07T20:18:28.730000 CVE-2025-58724,0,0,cc7bf51453f5e2064043f7d234d606216d4effeef122dd5618a731d45de7a264,2025-10-20T20:14:00.857000 CVE-2025-58725,0,0,1437f78f7f41af27148329289ab9c6cab2bcfd7f4b6461a4570cb2ec8581f2b1,2025-11-07T17:54:02.683000 -CVE-2025-58726,0,1,0c89b0cbefcd372ed73c66d06bc3fc465fab0d908bb5949447ce5de1fc8dd5b5,2025-11-11T15:15:36.350000 +CVE-2025-58726,0,0,0c89b0cbefcd372ed73c66d06bc3fc465fab0d908bb5949447ce5de1fc8dd5b5,2025-11-11T15:15:36.350000 CVE-2025-58727,0,0,c206ec393f72d494e8280cd3597e37f03be3da2c8b33f7e97b722548b815493d,2025-11-06T15:26:27.320000 CVE-2025-58728,0,0,90618dbe70f2f22250786352daeaceff044a0dd61a91c91ce4e9a993b3225dec,2025-11-06T15:27:47.257000 CVE-2025-58729,0,0,eb8191349a7d2bdf06cad001ee996a4e3a0b9901cd14ab3d76d8fd445cae0146,2025-11-07T17:52:59.903000 @@ -312270,6 +312346,7 @@ CVE-2025-59236,0,0,1eaba476af4910b9e0b521c59ae4c689e620e55dd777caff31bb6e67dd42b CVE-2025-59237,0,0,ab98f9c6f0d9dad2f4e78b2f05707c2dde5e66c8b0fecd82866bbf94bb4bc31e,2025-10-28T20:18:56.880000 CVE-2025-59238,0,0,7b96c3e35e928d56e5df8e498a2da997415058c8d7678a9fab1395b655f96aa9,2025-10-16T20:52:08.697000 CVE-2025-5924,0,0,e5569afefc2dc17b32a552fbc140ea78dd0087634a8b357eb3997017a1b3e8ef,2025-07-10T15:13:40.917000 +CVE-2025-59240,1,1,0905a20bbd9e50ae0f390ef1dc6a4f6598b8b9002f14b9037b3c4da6987be458,2025-11-11T18:15:35.563000 CVE-2025-59241,0,0,48ab999ddf5780f7dfdbbb861345f74463623eabe10a769272e1501918e1c387,2025-10-17T15:18:56.903000 CVE-2025-59242,0,0,3a0958c36ac0f3fef872af1ed90457e494d8a33b0b6b2e82c914107e026a3c90,2025-10-17T15:18:10.260000 CVE-2025-59243,0,0,2364087450396e28435fc8983173da931d359643bf7e3b2ce1eb828ae46039c9,2025-10-16T20:52:01.777000 @@ -312308,7 +312385,7 @@ CVE-2025-59282,0,0,c2ead17cf71623ba2835e95c6599c0dc175ff38a8e345b5ef3d5a3a8b285d CVE-2025-59284,0,0,958b7b6980c55033fbbbfd8db5043805a7ebf75c2d2b1fc491d5ea34a114bec4,2025-10-27T19:39:57.120000 CVE-2025-59285,0,0,32436689bd29408b5cd52492a8bccba3ddbad67246642297f2214f1e2ae32714,2025-10-27T19:39:11.330000 CVE-2025-59286,0,0,f2b485b3feb75c89a3302a942f8d66e84175cbea6a81db5488eb70ba618eabb4,2025-10-17T15:42:18.600000 -CVE-2025-59287,0,1,7e0b9f9ec3f7e0aa16262e1d8e9ad51bbe489e1965731b69bd5eabc61a8bc012,2025-11-11T15:15:36.537000 +CVE-2025-59287,0,0,7e0b9f9ec3f7e0aa16262e1d8e9ad51bbe489e1965731b69bd5eabc61a8bc012,2025-11-11T15:15:36.537000 CVE-2025-59288,0,0,fde6eb936c3d5037fe8184e3be5bbc890bb2c1e896115b23f3cba7298b968e10,2025-10-27T19:36:53.743000 CVE-2025-59289,0,0,9437b694b75a744c8a79d8436612b92752b496711419070522e2d84e685ecb54,2025-10-22T16:45:33.580000 CVE-2025-5929,0,0,22ddf18d1b5be0427bfffe06c7c342a3ee4be212fd6ecf814d57608fd0af56fb,2025-07-08T11:32:50.840000 @@ -312447,12 +312524,25 @@ CVE-2025-59489,0,0,c1653fd647aaf564a1eb43d51ba6f4bcca4081cece2a5c3d0d1183975e797 CVE-2025-5949,0,0,baf872ca495f6546dac2e07e389f80fc0bcede7010ff971d3bfb7bf8d919e6c5,2025-11-04T15:41:31.450000 CVE-2025-59494,0,0,854b9e5a8eb062e09bb4fb61d9cc9baf692cf2eaa6c3a6054a385059d94c5597,2025-10-22T16:39:26.210000 CVE-2025-59497,0,0,b66dcf967091f941ee9a7ec1f55249411f00b032a4978aa90a73caa66777f445,2025-10-22T16:38:34.453000 +CVE-2025-59499,1,1,92d24022f47a9d3586ca00e833db5dd598288501a5454b96c6ad59e098778082,2025-11-11T18:15:35.733000 CVE-2025-5950,0,0,dcbce31e91dedd5660700797b5a28fbb16ed679ced9402999e274d527a5148ab,2025-07-10T00:37:09.760000 CVE-2025-59500,0,0,e4b4af16519db2b07b06d297f6f31a3536d3b03961117ae0376116346bd07174,2025-10-27T13:20:15.637000 CVE-2025-59501,0,0,02321876ed7f1173c20a53f4ed52c28de94e10f26e460809f4fd3c6055732ae1,2025-11-05T18:17:55.247000 CVE-2025-59502,0,0,8a8ae300f0c1f20ebfdbcb1e43aef7f3ee710bb8d1cfabe1ecf4109cc6e3266b,2025-10-22T16:37:25.170000 CVE-2025-59503,0,0,8bda4936c89ee9318ef92486469e3f03e9b56f3353bae14e55eef5f42e583e0d,2025-10-31T17:15:47.317000 +CVE-2025-59504,1,1,bb99af6b21f3ddaf87ea84c1b195d3e45a74f9a3cbf3f3872a4e669b7d3cdc94,2025-11-11T18:15:35.900000 +CVE-2025-59505,1,1,811949c363b28c087e07dbfa31794fbabd455e7cb98ddb9909bb6087da50a616,2025-11-11T18:15:36.060000 +CVE-2025-59506,1,1,b9cd3f804d7de1bc43111b4c928fb6b0d7db3d7152994384c9b54def690d8f09,2025-11-11T18:15:36.230000 +CVE-2025-59507,1,1,b4e89be4a84e4cab8e74b0d4c6b7ebb8c65c0128fcf418a89d37228148e9d481,2025-11-11T18:15:36.403000 +CVE-2025-59508,1,1,e910edd1820f883707c28d7756e4e045fee5c985c530ba35976765f8f67a407e,2025-11-11T18:15:36.570000 +CVE-2025-59509,1,1,62414c68e3ce691d105c4a145deca69754a40835c223a8c421cf55082bb252e0,2025-11-11T18:15:36.737000 CVE-2025-5951,0,0,8284d36183b5c5a20ce1ccc5cb7415a68b49193aca2a0e8df993129c1d1d98e3,2025-06-28T23:15:21.963000 +CVE-2025-59510,1,1,639e2405114cdfcc95f9dace30135e3ec54fe13bbd9adebeaab6684d822e2148,2025-11-11T18:15:36.900000 +CVE-2025-59511,1,1,820cfe403159f66acd3bfd23d0c94d4cb44da3b9dc32ea5e11c3c17d42e4151b,2025-11-11T18:15:37.067000 +CVE-2025-59512,1,1,32ee0db9cedc7c6856b3eec22fe77846b777c225f7ecf0a5c75e68ee4cdb8dfc,2025-11-11T18:15:37.230000 +CVE-2025-59513,1,1,7b95f8a397cea4a08ed8340e3108d48bc17ede2efd6b2bca62ede7ed9d4b1650,2025-11-11T18:15:37.397000 +CVE-2025-59514,1,1,38dbfdc0dc2089b8029a8504e98d48f7b6b541f96ca42906f56c8bbaf091d3e0,2025-11-11T18:15:37.560000 +CVE-2025-59515,1,1,3a27a58bf89df555b8ca1e46161c96e53b12872ad6460e32e6f3a6ced1960918,2025-11-11T18:15:37.723000 CVE-2025-59518,0,0,10fb7c02dad8a4bad46ff1eaedf556836ec84b4cb9ec05f194da7eb0dbba6ee8,2025-09-17T14:18:55.093000 CVE-2025-5952,0,0,80f5810e94a735443b1add4b87f50d30096f6ed0c46ddf37bebc56b27e945b75,2025-06-12T16:06:39.330000 CVE-2025-59524,0,0,2d035b945c725504e8491c1366ee74349280c1cd1b5638f27ededdb9d81c1d75,2025-09-29T14:04:48.430000 @@ -312897,7 +312987,7 @@ CVE-2025-60196,0,0,46efcb56ec31b3dd4b903e0ac5ee0599640d35c88f2be5d5c03d1318f8918 CVE-2025-60197,0,0,ee8a8458470eea526437a378c6846562065bef16dc5297f35b99e8cd55e8769f,2025-11-06T19:45:09.883000 CVE-2025-60198,0,0,5ff251d235265fd81e820eb19829e6faa79b7d1dd972d71be2ded5a31d654cf2,2025-11-06T19:45:09.883000 CVE-2025-60199,0,0,8e8956104f1983b2204f713fc6c7ab01494d2cfe145aea97d960c826c3ca1312,2025-11-06T19:45:09.883000 -CVE-2025-6020,0,1,4cc5af20ba4f62a0998749441b153a85c6660a42c1ef20672eb049505a42a2c3,2025-11-11T16:15:40.430000 +CVE-2025-6020,0,0,4cc5af20ba4f62a0998749441b153a85c6660a42c1ef20672eb049505a42a2c3,2025-11-11T16:15:40.430000 CVE-2025-60200,0,0,2187f488bb37f4382b7dbe43a6206cdcd7e7a666d1cde3adb5089861ab91973a,2025-11-06T19:45:09.883000 CVE-2025-60201,0,0,203cb4d3f8b78fa87f4929845101d9ceb638d8f5c9ca429e9c2ca59a5e064364,2025-11-06T19:45:09.883000 CVE-2025-60202,0,0,c77e1a4abf17fb107d706b36f2a7bf03d0d37ba99c7f88c25376b3fb1e19b391,2025-11-06T19:45:09.883000 @@ -313088,9 +313178,32 @@ CVE-2025-6067,0,0,3f5143eb57b93e2fbdd34002ea8d16a4abdd030be5d8420fd53efbd285e6b4 CVE-2025-6068,0,0,6c3b9931ec707952af1e4745e7277c7b6e4ec480500de06ea4debac1456c0d14,2025-07-17T13:11:47.847000 CVE-2025-6069,0,0,0f007db3fd10778e4e1329010274d3b3eb06f3b20784f9447cb9e7427701e0c3,2025-07-07T18:15:29.150000 CVE-2025-6070,0,0,c5bf4414dfa4d281aa3a990feec25cc21fddd34f58ddd67c6eaf8ae460160cc5,2025-06-16T12:32:18.840000 +CVE-2025-60703,1,1,8434332773708f3e62f681ae00416139034f222f5455a10b601ab66df8991217,2025-11-11T18:15:37.890000 +CVE-2025-60704,1,1,7b6f7343952d36cf0cc01fcde5018c68403c7b728fc2bc6f5b8176adaae9043c,2025-11-11T18:15:38.060000 +CVE-2025-60705,1,1,17be844b17d79cba3f6b42885d01875a7ce2a57874e8eadd6dcebe5612abef8a,2025-11-11T18:15:38.237000 +CVE-2025-60706,1,1,1f46221d20752e16c12eb350d23b9e0d3c24b23cdcff76bbdf450ee0522b2299,2025-11-11T18:15:38.403000 +CVE-2025-60707,1,1,0e54bae504640be51d42cbe420d00f92cb36a4a1bd7b573e79dc691f97a18248,2025-11-11T18:15:38.570000 +CVE-2025-60708,1,1,e8c6a205134834a48ca5ff24a16e770429bd895f7697d5cc9f14311ac0b0be1d,2025-11-11T18:15:38.737000 +CVE-2025-60709,1,1,adadf06cd7dc8414cffad08bae7f7d6d747eae4426f7408aad61e925e11610b1,2025-11-11T18:15:38.903000 CVE-2025-6071,0,0,5a2f1c37d2d27a51af48fa91ca5d3cdc66d7e8a21cc0b9d4147668b931579f4d,2025-07-08T16:19:11.700000 +CVE-2025-60710,1,1,4283cbaba05895e7dbf66a8fb5b8b5577772291991f5d60d5b73bd7c4402bdb8,2025-11-11T18:15:39.073000 CVE-2025-60711,0,0,ae7e916fb63a5267753916f39a410675756bbe402a9d7053daab7b2ebb9ac07c,2025-11-05T19:34:07.253000 +CVE-2025-60713,1,1,e4951aa6efdba79d1ee1e881d41d941291421333e5bbe639662939d6e325324c,2025-11-11T18:15:39.233000 +CVE-2025-60714,1,1,a2d3248f61b757d8e93c6ed2470113e59f05a13b59781bdc195bbc737ad85f74,2025-11-11T18:15:39.390000 +CVE-2025-60715,1,1,0b8545ebb208f38ef516452019c46395e901fc9b419308fda2c2f178fae812a9,2025-11-11T18:15:39.560000 +CVE-2025-60716,1,1,5849827da7cd139741e162ad53dda1210163cb8a221eb8c2ffea58363c72a890,2025-11-11T18:15:39.740000 +CVE-2025-60717,1,1,a1f417554786ce3bca62137a337b1da683fa85ea5459e2dedf29314808798f23,2025-11-11T18:15:39.900000 +CVE-2025-60718,1,1,f1191d530d5876dd56858abe51c5383c3a0f867ea390aa4e2e9a720342a8a2b6,2025-11-11T18:15:40.073000 +CVE-2025-60719,1,1,b538fbd92e49ae0cee0ee00690fd9f91bcfda153ddd5746d1b8742fb2a7b4c78,2025-11-11T18:15:40.233000 CVE-2025-6072,0,0,c404ef56b8d7c95a44a5ea20a1ffadee7a90f2312922176828cc4347c44b4b31,2025-07-08T16:19:11.700000 +CVE-2025-60720,1,1,2085ff957526a84bb37683767db6f8033052149b0479897c7611a4439cd4453a,2025-11-11T18:15:40.400000 +CVE-2025-60721,1,1,a880e4659b867e6dab7dbaeac47f3507a946951288d7a0f66c00ac1a0765af62,2025-11-11T18:15:40.573000 +CVE-2025-60722,1,1,c1bd86d1430304d933f0b2f63296b4bff7262cefb1cc1621b1497c43b5c1b5dd,2025-11-11T18:15:40.733000 +CVE-2025-60723,1,1,1e857fa5401e754ce64385f0d26955110d2364fd75fcc3053c2e8380dd5c4f59,2025-11-11T18:15:40.883000 +CVE-2025-60724,1,1,a19d0d145faede8dc14ee30d728bb25d50d0d59d22482ed0365e5526265558cf,2025-11-11T18:15:41.060000 +CVE-2025-60726,1,1,49210819a22dfb89c60120faa77e54e762998c91019479d668b78d64c098df15,2025-11-11T18:15:41.240000 +CVE-2025-60727,1,1,797cef595a17f6d6440532b2c6f0da439f24ead3d6aefd9b6d5d88331c10f699,2025-11-11T18:15:41.397000 +CVE-2025-60728,1,1,4841f71a4402549f73ffe14de1f451f37e9936775c58a858d4ebf66e61f0e2ec,2025-11-11T18:15:41.550000 CVE-2025-60729,0,0,91b247ba9509e076fd8bca1a123a26ad9609935145df8f7c3ee6221607316054,2025-10-27T17:53:39.710000 CVE-2025-6073,0,0,59aa2c7268ef1b1e834caf9432d42406e93210052d682b4dfbc8879d14a36fcf,2025-07-08T16:19:11.700000 CVE-2025-60730,0,0,a02613861a6fe7fc18e5072823c1cb1f96ad36203a4ab0eaad7e65dedce4cdbc,2025-10-27T17:49:47.320000 @@ -313462,8 +313575,23 @@ CVE-2025-61805,0,0,fce4c313bc75335df6a256e45eff32fe487326b5039ec2b536df24cfc04cc CVE-2025-61806,0,0,51148c85d355c75ba9ed47a7310be1c8f0647cd3d24e27c46e437a22ab80039b,2025-10-16T17:37:26.160000 CVE-2025-61807,0,0,bef2750bed1c12a21c789be5d1ac1a383d41c818ed4588b47e17adfc33c5e46d,2025-10-16T17:37:33.997000 CVE-2025-6181,0,0,685dc315ab97b05c425dcd18d4ddc1865cf807dd39d66392023ac740b52bdb57,2025-08-22T18:09:17.710000 +CVE-2025-61814,1,1,5cdd628a25fc7e59608a09b0356a4d4b8ab680839814d926ca45156a69b42c51,2025-11-11T17:15:51.977000 +CVE-2025-61815,1,1,c7f38596f4be4720cb45d2281b802fa5b6d982c0a1aac49a8146fdae1a38c90d,2025-11-11T17:15:52.150000 +CVE-2025-61816,1,1,18d240b9b696aeb3991f1d4a34cbf70f2ee2ab0806846411e3a064922107ccad,2025-11-11T17:15:52.303000 +CVE-2025-61817,1,1,696fe6780159e3065fd400ba33aae47dcf80fc16a5a84dd54beb1b8f17412d1d,2025-11-11T17:15:52.463000 +CVE-2025-61818,1,1,127f3729747bad064e849c055e4ebe39ddafbdd7dc9dd226ca319770c5e9ed84,2025-11-11T17:15:52.617000 +CVE-2025-61819,1,1,e3e25df2e225b70b3def4630057c7093abdcaecb3e17bbf680bf55e31660477a,2025-11-11T18:15:41.710000 CVE-2025-6182,0,0,0e331b010ee04c9f4ed6e76a22166e5dafdbdd0c19efc727920d7f6467e279f4,2025-08-22T18:09:17.710000 +CVE-2025-61820,1,1,568805a2c9d43c8cf00229b487dcdc1415e2e93256c4fc949a599278eec81362,2025-11-11T18:15:41.877000 +CVE-2025-61824,1,1,12316e2ee000202e12bd357bd521cb4ceb399e61d2fab2943cbd0c9b6c6cf96d,2025-11-11T17:15:52.760000 +CVE-2025-61826,1,1,5c68280524220bd0513442b692f8ced20f5f5fd420b8ee488ddb579927dd71a0,2025-11-11T18:15:42.040000 +CVE-2025-61827,1,1,5456e75dc0cb7cc74253d870723e18b16a40ba96ce7704a37c266354bad8a010,2025-11-11T18:15:42.213000 +CVE-2025-61828,1,1,9bdf505c0b11d0d76d65eaa50bcd81b1badb655bebd34e986979393e49be0244,2025-11-11T18:15:42.377000 +CVE-2025-61829,1,1,ff037e3b33dd4b5cb2bbf22c3e3eba0f07a4ba0022e6073a5cf4a18baab7d1a3,2025-11-11T18:15:42.537000 CVE-2025-6183,0,0,e0af9b65795437de1a12bf44f10c6d1303c71db15aff07a8e3f3e1dbf7c43bd7,2025-08-22T18:09:17.710000 +CVE-2025-61831,1,1,8a86750cb9f6139700d4acea2a4f84c9eaedd183048b82a10da123b7e1c0741a,2025-11-11T18:15:42.697000 +CVE-2025-61832,1,1,d91130e81f2e07a79ffe8a84dc275393d5a208133ee0a6c643c9405414f9da62,2025-11-11T17:15:52.913000 +CVE-2025-61836,1,1,d0b09cd206557d662ee5b326b081a3bf844247c6d6835aafc65bbf77afb3b64a,2025-11-11T18:15:42.850000 CVE-2025-6184,0,0,e9b1d597c7bb9ebb4d38497b8d943428ee81bb339788845222d5bff800fc776a,2025-08-13T17:33:46.673000 CVE-2025-61847,0,0,b227ce8767bd575092eb5235c14515e1f72c0a0a99b3da9dd8f6d5f1bb432904,2025-10-03T03:15:36.030000 CVE-2025-61849,0,0,0069d4c0920bd820f16ed214515f20fbaf6b9b86479898301ed334bf7fea348f,2025-10-02T03:15:28.740000 @@ -313547,7 +313675,7 @@ CVE-2025-6197,0,0,ed52a546a3f13ce1b5e199dd6d87c3691e93f6fcb6a6040c167bb160cdaae7 CVE-2025-61974,0,0,45cb75c8e82902fa65edb12e221d0580ec04acd50fe37328dd6dcf607a54ffae,2025-10-21T21:09:04.580000 CVE-2025-61977,0,0,c232343180b13953480d7261ef00cc6e7206302e35cadd293f002453ab9bff32,2025-10-27T13:20:15.637000 CVE-2025-6198,0,0,db1c039487e8b4d4c3b8081066603ccfd944901fc68c285d492da4db9add531a,2025-09-25T10:15:31.670000 -CVE-2025-61984,0,1,52695b025248403c57baf599c4e87640ff2909eb8e3decf8315e738e0de3ee38,2025-11-11T15:15:36.703000 +CVE-2025-61984,0,0,52695b025248403c57baf599c4e87640ff2909eb8e3decf8315e738e0de3ee38,2025-11-11T15:15:36.703000 CVE-2025-61985,0,0,5d33b8575f3bc64b3690e1f198299acfcfc079d0f287f48c5bf85b48f5ae182f,2025-10-08T19:38:32.610000 CVE-2025-6199,0,0,4cfff2929d4191f0ea2e897ad77718f1879f8d62a9ee03b5298a6efca64faca7,2025-11-03T20:19:18.417000 CVE-2025-61990,0,0,dd9eccd2d841f704fc8e0d08ef104bf80ba9bce59d83daf1fb4df34f536813db,2025-10-21T12:12:24.840000 @@ -313663,14 +313791,35 @@ CVE-2025-6218,0,0,0e265a89cc2a3bd08feb5d5cbdea0ea20f815a5e3a21352ce4021a3ae0596b CVE-2025-62185,0,0,23065d25d19006ec9ce0e7971490917791cb76b8db15150199dfb8e6295a3113,2025-10-10T16:21:24.813000 CVE-2025-62186,0,0,03751ea1dcd8c89ba993ad0cb3022dc40184343b0b2c27930bbff8334d398f17,2025-10-10T16:20:53.197000 CVE-2025-62187,0,0,0dc556ed1ccbcd83f3d743688420ee466016c258b1cba268f451585ff9b039e0,2025-10-10T16:20:13.313000 +CVE-2025-62199,1,1,6d45a035b1adf939d7e97461fc3a3a203e731e2a4c0fc9cc3220f6d7bcfeed6a,2025-11-11T18:15:43.013000 CVE-2025-6220,0,0,e66f072c85720461fb3cacbee4402aeee35c76d5a4e75aa47105eb50b7753f18,2025-07-09T18:49:50.567000 +CVE-2025-62200,1,1,8409ad70a7a6d2a6f18978b412a938bb4ceeebdea9716586f9acd7739766ad10,2025-11-11T18:15:43.237000 +CVE-2025-62201,1,1,2a93eb91458d783c014ff8dc04d714fc524a6380258ccf12e0cccdc0a1e060e3,2025-11-11T18:15:43.440000 +CVE-2025-62202,1,1,a36ed1a1cc15e9508ee688d138ae4c993142f36f60ac11432e0681e8c66174c3,2025-11-11T18:15:43.693000 +CVE-2025-62203,1,1,828866dd68e91d79b0ff1d088ff1cecdbc3dd9c72f2faab862061e20da2120e2,2025-11-11T18:15:43.970000 +CVE-2025-62204,1,1,a7205a3604aa66cbc086622cb39dad05ae60d63a16425762bac0f309af3d4d51,2025-11-11T18:15:45.513000 +CVE-2025-62205,1,1,1ae565669d3038ab267e21355cf90907d5e521033a5bc74fade74ff5c4fb3906,2025-11-11T18:15:46.117000 +CVE-2025-62206,1,1,90e9f09e5a465f65057b632ce65d97fc1b3b8ddee7f8be245464288a588e4b0e,2025-11-11T18:15:47.750000 +CVE-2025-62208,1,1,45b33265f4aef49c50b077ec8cf865c864286c6fcf1f65480469f1bf78bb227e,2025-11-11T18:15:47.923000 +CVE-2025-62209,1,1,d412294d59333e845dd5f45da78ab240325a7d444b230c030f9c7e079421a2d8,2025-11-11T18:15:48.100000 CVE-2025-6221,0,0,4e31fc9467a437d05f8d8f175d334cd281f82bda6b2d534c215e37146adfdd27,2025-08-18T20:16:28.750000 +CVE-2025-62210,1,1,fd4ed98d56d31c0a60b38db604d3dbbd9942399a0354620d2acfad6df1e4fb29,2025-11-11T18:15:48.273000 +CVE-2025-62211,1,1,cedf398896d326eb81484ad796d23b624ff7b7091fb9868f6eed143e23dbe45a,2025-11-11T18:15:48.440000 +CVE-2025-62213,1,1,9588cec32f514a4eb106b680a38e7d33939401c2c4706471ef92925035cc0cf5,2025-11-11T18:15:48.600000 +CVE-2025-62214,1,1,b1ddd01684548cede30370f2de768ac38ced1e24f32465f66e905c0f49bbc2a0,2025-11-11T18:15:48.760000 +CVE-2025-62215,1,1,742fbda8c839f4209bf6d1f0448d62ddaa6ac6161f0f9577bf076711888723e3,2025-11-11T18:15:48.920000 +CVE-2025-62216,1,1,c5e877b233c93a2dd478dfaebf30658ffbb3f298840661fe46f3ebbe8ebdbc1c,2025-11-11T18:15:49.080000 +CVE-2025-62217,1,1,3095f932cc2dc4934c027e441b50fb0c56a7e1917531904beda3b39bd934ef65,2025-11-11T18:15:49.243000 +CVE-2025-62218,1,1,dac5f27d052406a43e93148bfc729ca91e2a4f5b275b7cad8d0880cc65f1735e,2025-11-11T18:15:49.410000 +CVE-2025-62219,1,1,fdc87713f5e23310ac73d2a88ad9acffe30f2507374cb093a87df529fb59ae4e,2025-11-11T18:15:49.570000 CVE-2025-6222,0,0,6ab3fa952d6c3322aff869e3d13252d8cce85e17add83d6925468eae339b06bd,2025-07-22T13:06:27.983000 +CVE-2025-62220,1,1,1cc73b4afd86285a3e77d10933ddf717bfdc56a37b4a2c18fe09d5d3e0407d68,2025-11-11T18:15:49.730000 +CVE-2025-62222,1,1,032c391864443d121c8facd67b45cd214a8972c5568f1e07e935aadfe51236f6,2025-11-11T18:15:49.887000 CVE-2025-62225,0,0,5e5e30dce2450e8af243865130c21e5e1681c40fd91622536f84becd571ed600,2025-11-06T19:45:30.990000 CVE-2025-62228,0,0,1a490ac65040f8d755fd150fc0c76449bb433560cae986c3b003ae901c9f36fc,2025-11-04T22:16:37.680000 -CVE-2025-62229,0,0,ea60085942d58f18785bacde56ec9f8c7ce5833386dd47af209423bcbff8c3a7,2025-11-06T14:15:44.150000 -CVE-2025-62230,0,0,b007676fd0fb3a97ca395d12e3e5183b6389fedc8aed708b845dab269eb9b2a0,2025-11-06T14:15:44.653000 -CVE-2025-62231,0,0,3fc4ab12ae398b27169e2a3e13ebe3c841c8ad60588a04729ec9b21eb0046b93,2025-11-06T14:15:44.797000 +CVE-2025-62229,0,1,88a10931ee669319776a5dbad8f1678081e9c0881c4d15d9b6f07fb9e6acaad4,2025-11-11T17:15:53.063000 +CVE-2025-62230,0,1,e8f3b2d7277e6b6458e6bbfaef6e4c007d0386b300c424e9cc99fd01e3a6dbe1,2025-11-11T17:15:53.200000 +CVE-2025-62231,0,1,8aedbc6606a6eab6336798a4eb47becb2d76f00b0da32d4759160b3efe753a72,2025-11-11T17:15:53.330000 CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000 CVE-2025-62236,0,0,15a5caffd14cf9ee2af6ac6cf3031f9d0466adcdd94376f42fd22604d4f0e595,2025-10-27T13:20:15.637000 CVE-2025-62237,0,0,50afe9cde633923a8104d90291ee98bd713fe21b8178eff2dd59e01bb75e841c,2025-10-14T19:36:59.730000 @@ -313804,6 +313953,9 @@ CVE-2025-62445,0,0,b590285e67297bf515ebdab21724ca29c53a7748009fc72d1a697faf0f68d CVE-2025-62446,0,0,93df14e8702948859354fbab84aab153ffa49172bafecece4c8142b754acf9df,2025-10-15T03:15:33.997000 CVE-2025-62447,0,0,ffcdcbb68d3eefe012c2b504a16c8c05ac5847b5eebd423e4e6bcb813ac02995,2025-10-15T03:15:34.063000 CVE-2025-62448,0,0,530aa50b4f17789705379482f34d371d6149325b6fb604e9d151db9d56027878,2025-10-15T03:15:34.127000 +CVE-2025-62449,1,1,5cd30549b5923677473f0d7dea774501551e262d7e85f9bceefb94e24ab006b8,2025-11-11T18:15:50.043000 +CVE-2025-62452,1,1,36bb67197b01271e564fc3ba1a37ba9cd4e224171c9b3e5f80fbccf11d97ce7c,2025-11-11T18:15:50.250000 +CVE-2025-62453,1,1,916ccf2de8627da42cd5faf81d46d4216725033846df9ec7e8d5603f5945356d,2025-11-11T18:15:50.423000 CVE-2025-6247,0,0,9dd0eef5de01eff9564340bdecce27db6a94dc6a05571052e160d9bb54e5468e,2025-08-26T13:41:58.950000 CVE-2025-62475,0,0,402de06bb0148877e051211f18166bedd7d0faaf0c0b5c95410082b3d0ef1275,2025-10-23T16:02:55.170000 CVE-2025-62476,0,0,4677b5e898c09c9e06aa39ea11d65e77c4c96072775393366d902b8d47d3b693,2025-10-23T16:02:42.473000 @@ -314619,7 +314771,7 @@ CVE-2025-6474,0,0,34f2cdc646f0fdfac764e66e3140f858fbf31974233afdd9a8f8817759fa4f CVE-2025-6475,0,0,3f426cf1651995de981716ed0ce59ff04720b4c8d7d4d43d75adecd6f0735dbd,2025-06-27T17:20:59.637000 CVE-2025-6476,0,0,88c9d4c09f8a99588e03924e5dd1181761a91a2ea6d53c95f7cf80fed6da32d7,2025-06-27T17:14:29.533000 CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c33723313882d,2025-06-25T19:25:44.190000 -CVE-2025-64773,1,1,b95c43985b16f8517289bcf847a3457348e4424a50bf42ddcd4329c1f01a7964,2025-11-11T16:15:40.260000 +CVE-2025-64773,0,0,b95c43985b16f8517289bcf847a3457348e4424a50bf42ddcd4329c1f01a7964,2025-11-11T16:15:40.260000 CVE-2025-6478,0,0,31ec8a10802d4265d3843ba47157156e1cd48721db6d3f2b4bbfa8dcfc5414f1,2025-06-27T17:13:26.643000 CVE-2025-6479,0,0,2c5b2471154f56ce282446555e3678e22ea4cd2374f79e129a80d30240de1c44,2025-06-25T19:19:01.967000 CVE-2025-6480,0,0,93237f12d754008f7fd67ea5d034bb783649924c98eaa92f468d9844c78fedc5,2025-06-25T19:18:18.497000 @@ -317177,7 +317329,7 @@ CVE-2025-9404,0,0,e4bc32ba99ab130fbbdfba9269f35a03b5b429e5d156221dbc532345df9e1b CVE-2025-9405,0,0,9f770524ab1340d9b1e35b54011111d815161f1c8342f784027329da0f2f5932,2025-09-02T18:17:59.323000 CVE-2025-9406,0,0,7e09f01bd6277e5ca9910adb49e0bc28228fe5a3dca366a196071b89ef440301,2025-09-12T20:15:22.290000 CVE-2025-9407,0,0,93924e937d16b4680d7887d7a98b333308eacb8496f0231531eca6c4ba806c47,2025-08-27T18:59:30.240000 -CVE-2025-9408,1,1,9e41738f08b0b696dbe08e72e4cf21c475dddd40970c654ff40fa6d78dd98528,2025-11-11T16:15:40.917000 +CVE-2025-9408,0,0,9e41738f08b0b696dbe08e72e4cf21c475dddd40970c654ff40fa6d78dd98528,2025-11-11T16:15:40.917000 CVE-2025-9409,0,0,c06d4b0fe4bdf2546b32b15c30290ee5bcfcd6d114703ac29f413e59e3d9cf2a,2025-10-06T18:19:08.203000 CVE-2025-9410,0,0,c1afb6fd0f1eb0dc65ee48bc168e7cd9c8ba3ba71062f12546805c6c9753a26c,2025-10-06T18:15:32.317000 CVE-2025-9411,0,0,64168c6c3be4cbbbccd4a5167d2dea73517dc22228067b837ddfc99ad610a85e,2025-10-09T17:47:12.257000 @@ -317421,7 +317573,7 @@ CVE-2025-9708,0,0,577da62ef9722be75055b90cdf6e32f2f6bc588449196f2465cbf2414f329f CVE-2025-9709,0,0,084af143101840a4a7aaf70be10f398f855dceeb3e17ee498ab844e56ec22ad8,2025-09-08T16:25:38.810000 CVE-2025-9710,0,0,3ccf57af36b6f6feb466f4c8ccb14851bebfd477cd70a18ca9a71d3172702a21,2025-10-06T19:15:36.680000 CVE-2025-9712,0,0,fc23031238dd480069083662786de16eae41a484c8a3338f1e83f96dfd9999c1,2025-10-10T19:25:42.520000 -CVE-2025-9713,0,1,c25996592ecde3d45c2a5f6c47e80d0fe74b6730f71a5241f17d6b1b49dbe952,2025-11-11T15:15:36.883000 +CVE-2025-9713,0,0,c25996592ecde3d45c2a5f6c47e80d0fe74b6730f71a5241f17d6b1b49dbe952,2025-11-11T15:15:36.883000 CVE-2025-9714,0,0,60a5fa64754d3892dd0fb578891e20e8b4c43ea50bcd1653e8b1055cb39c53dd,2025-11-03T19:16:17.563000 CVE-2025-9715,0,0,177b1bee303c1085dd6fe9e4977bb333182ba80c7074e94c33f11b64a18761bd,2025-09-10T15:07:34.760000 CVE-2025-9716,0,0,c526b96d07194b144217b69bb7124ebdb1a77ec25f3dfd0b507317a42083673b,2025-09-11T21:15:19.023000 @@ -317597,7 +317749,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000 CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000 CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000 -CVE-2025-9900,0,1,16412a5f06120117ff39cd9fe426cfb9a0b0606dadb6bd9937085b2c8dd9272b,2025-11-11T16:15:41.080000 +CVE-2025-9900,0,0,16412a5f06120117ff39cd9fe426cfb9a0b0606dadb6bd9937085b2c8dd9272b,2025-11-11T16:15:41.080000 CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000 CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000 CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000