Denial of service in the Protobuf PHP library (protobuf-php / composer google/protobuf) allows remote attackers to crash applications that deserialize untrusted Protocol Buffers input by submitting messages containing negative varints or excessively deep nested recursion. All versions below 4.33.6 (and the 5.x line prior to 5.34.0-RC1) are affected; there is no public exploit identified at time of analysis, and EPSS is low at 0.07%, but a vendor patch is available and the issue was reported by Google's CVE coordination team.
Path traversal in OpenHarness allows authenticated gateway users with chat access to read arbitrary files on the server via the '/memory show' slash command. Affecting all versions prior to commit dd1d235, attackers can inject directory traversal sequences to escape the project memory directory and access any file readable by the OpenHarness process. CVSS 7.1 reflects high confidentiality impact with low-privilege network access. Vendor patch available via GitHub commit dd1d235450dd987b20bff01b7bfb02fe8620a0af. No public exploit identified at time of analysis, EPSS data unavailable.
Password reset token leakage in FuelCMS 1.5.2 allows unauthenticated attackers to steal a victim's password reset token through a malicious link placed in a valid password reset email. The attacker can then reset the victim's password, gaining unauthorized account access. A proof-of-concept exploit is publicly available, though exploitation is not automated and no active exploitation has been confirmed.
Local privilege escalation in the AMD Platform Configuration Blob (APCB) SMM driver, shipped in AGESA firmware across nearly the entire modern AMD EPYC, Ryzen, Threadripper, and Instinct MI300 line, lets a Ring 0 attacker escalate into System Management Mode (SMM) and potentially run arbitrary code below the operating system. The flaw stems from the SMM driver improperly invoking UEFI boot services, and AMD-reported it with a CVSS 4.0 base of 7.1; there is no public exploit identified at time of analysis and EPSS is negligible at 0.01%. Because SMM code runs at a higher trust level than the OS kernel, successful exploitation can undermine firmware integrity and any SMM-based security guarantees.
LINE for iOS versions before 26.3.0 suffer from dialog-based denial-of-service through the in-app browser. A remote attacker can render an iOS device temporarily inoperable by crafting a malicious web page that triggers infinite OS-level dialog loops when opened in LINE's browser, requiring only that a user click a malicious link. EPSS exploitation probability is minimal (0.01%, 1st percentile) with no active exploitation confirmed. Vendor patch released in version 26.3.0, addressing CWE-451 (user interface misrepresentation).