Microsoft Windows

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281.

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Code Signing (1.3.6.1.5.5.7.3.3), valid from 2023 until 2033. This is potentially unwanted, e.g., because there is no public documentation of security measures for the private key, and arbitrary software could be signed if the private key were to be compromised. NOTE: the vendor's position is "we do not have EV cert, so we use test cert as a workaround." Insertion into Trusted Root Certification Authorities was the originally intended behavior, and the UI ensured that the certificate installation step (checked by default) was visible to the user before proceeding with the product installation.

Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Incorrect privilege assignment in Portal for ArcGIS

Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password

Weak Password Recovery Mechanism in Portal for ArcGIS

Incorrect privilege assignment in Portal for ArcGIS

Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

EL Injection Vulnerability in Hitachi Global Link Manager

RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies

IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

SQL Injection in the Octopus Server REST API

Command execution hijack on Windows with Process class in symfony/process

Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

IBM WebSphere Application Server Liberty could provide weaker than expected security

Incorrect Permission Assignment for Critical Resource

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

EL Injection Vulnerability in Hitachi Tuning Manager

Improper Use of Validation Framework

Use of Password Hash with Insufficient Computational Effort

Use-after-free caused by the native messaging web extension API on Windows

Missing Cryptographic Step

Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

RustDesk Flutter URI Handler Sets Permanent Password Without Privilege Check or User Confirmation

Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page. (Chromium security severity: Low)

Missing Signature Verification for Updates in Ollama

RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force

Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Spectrum session token in URL

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

.NET Security Feature Bypass Vulnerability

Poly Lens Desktop Application – Privilege Escalation

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)

Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution

WhatsUp Gold - Public API signing key rotation issue

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-concept script that functions similarly to a Student Console, providing unauthenticated attackers with the ability to exploit XSS vulnerabilities within the Teacher Console application and achieve remote code execution as NT AUTHORITY/SYSTEM on all connected Student Consoles and the Teacher Console in a Zero Click manner.