Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2025-59241

Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_11_25h2
Published: Oct. 14, 2025

Modified: Oct. 17, 2025
7.8

HIGH

CVE-2025-55697

Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022_23h2 windows_server_23h2 windows_server_2025
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-43472

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to gain root privileges....

Affected Products : macos
Published: Nov. 04, 2025

Modified: Nov. 04, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-55680

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +3 more products
Published: Oct. 14, 2025

Modified: Oct. 24, 2025
7.8

HIGH

CVE-2025-43939

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading...

Affected Products : unity_operating_environment
Published: Oct. 30, 2025

Modified: Nov. 03, 2025

Vuln Type: Injection
7.8

HIGH

CVE-2025-59227

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally....

Affected Products : office 365_apps office_long_term_servicing_channel office_macos_2024 office_macos_2021 office_2016 office_2024 office_2021 office_2019
Published: Oct. 14, 2025

Modified: Oct. 16, 2025
7.8

HIGH

CVE-2025-43387

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2. A malicious app may be able to gain root privileges....

Affected Products : macos
Published: Nov. 04, 2025

Modified: Nov. 04, 2025

Vuln Type: Authorization
7.8

HIGH

CVE-2025-55696

Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +3 more products
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-59192

Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 17, 2025
7.8

HIGH

CVE-2025-54276

Substance3D - Modeler versions 1.22.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to...

Affected Products : substance_3d_modeler
Published: Oct. 14, 2025

Modified: Oct. 17, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-43940

Dell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading...

Affected Products : unity_operating_environment
Published: Oct. 30, 2025

Modified: Nov. 03, 2025

Vuln Type: Injection
7.8

HIGH

CVE-2025-62579

ASDA-Soft Stack-based Buffer Overflow Vulnerability...

Affected Products : asda_soft
Published: Oct. 16, 2025

Modified: Oct. 28, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-12489

evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute l...

Affected Products :
Published: Nov. 06, 2025

Modified: Nov. 06, 2025

Vuln Type: Injection
7.8

HIGH

CVE-2025-58724

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally....

Affected Products : azure_connected_machine_agent arc_enabled_servers_azure_connected_machine_agent
Published: Oct. 14, 2025

Modified: Oct. 20, 2025
7.8

HIGH

CVE-2025-59494

Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally....

Affected Products : azure_monitor_agent
Published: Oct. 14, 2025

Modified: Oct. 22, 2025
7.8

HIGH

CVE-2025-47352

Memory corruption while processing audio streaming operations....

Affected Products : fastconnect_7800_firmware wsa8840_firmware wsa8845_firmware wsa8845h_firmware fastconnect_7800 wsa8840 wsa8845 wsa8845h qcc2072_firmware qcc2072 +18 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-47361

Memory corruption when triggering a subsystem crash with an out-of-range identifier....

Affected Products : qam8295p_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa8295p_firmware qca6595_firmware qca6698aq_firmware sa8540p_firmware sa9000p_firmware qam8255p_firmware +46 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-61832

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a ...

Affected Products : indesign
Published: Nov. 11, 2025

Modified: Nov. 11, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-20728

In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115;...

Affected Products : mt7902 mt7921 mt7927 mt7920 mt7922 software_development_kit mt7925
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-59222

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally....

Affected Products : office word sharepoint_server 365_apps office_long_term_servicing_channel office_macos_2024 office_macos_2021 sharepoint_server_2016 word_2016 sharepoint_server_2019 +3 more products
Published: Oct. 14, 2025

Modified: Oct. 16, 2025

Showing 20 of 4011 Results

Browse by Apps

Latest CVE Feed

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

7.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable