ZDI Advisories

WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

NI LabVIEW VI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability

Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

NI LabVIEW VI File Parsing Integer Overflow Information Disclosure Vulnerability

Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution Vulnerability

Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution Vulnerability

Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability

Langflow

Foxit

Oracle VirtualBox VirtioSCSI Out-Of-Bounds Read Information Disclosure Vulnerability

Oracle VirtualBox IDisplay Out-Of-Bounds Read Local Privilege Escalation Vulnerability

Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure Vulnerability

Backblaze Personal Computer Backup bzreports Link Following Denial-of-Service Vulnerability

Foxit

Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability

Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability

PyTorch Foundation

Koha Eval Code Injection Remote Code Execution Vulnerability

Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability

Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability

Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability

Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability

Microsoft

Microsoft