CVE Vulnerability Catalog

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier have an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker can bypass security measures and gain unauthorized write access. User interaction is required (visiting a maliciously crafted URL or interacting with a compromised web page).

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier have an Improper Input Validation vulnerability leading to security feature bypass and unauthorized write access.

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

An out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

A protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

An out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

The vulnerability in OpenSSL affects the EVP_PKEY_derive_set_peer() function when using a DHX (X9.42) peer key. A malicious peer can exploit the lack of proper subgroup membership check, leading to the recovery of the victim's private key after a few key exchange attempts.

The CMS_decrypt and PKCS7_decrypt functions in OpenSSL are vulnerable to a Bleichenbacher-style attack when an attacker can provide CMS or S/MIME messages and observe the error code or decryption output. This allows the attacker to use the victim's application to decrypt or sign messages with the victim's private RSA key.

Heap buffer overflow in 389 Directory Server. The create_masked_entry_string() function in auditlog.c copies a password mask into a precisely-sized buffer without checking space, causing overflow when logging a short cleartext password.

In 389 Directory Server, the LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrumentation.

When exporting all reusable media, gift card secrets were included in the export even if the user lacked permission to view them. This bypasses permission boundaries.

In TYPO3 CMS, the GeneralUtility::isAllowedAbsPath() function performed a plain string prefix comparison without requiring a directory separator boundary, allowing administrators with File Abstraction Layer access to create file storage definitions outside the project root.

A logic bypass vulnerability in the file system. Successful exploitation may affect system availability.

Permission control vulnerability in service notifications. Successful exploitation may affect availability.

Vulnerability in Custom Block Builder WordPress plugin before 4.3.0 allows administrators on multisite (or with DISALLOW_UNFILTERED_HTML) to inject arbitrary JavaScript that executes for visitors of pages with the affected block.

A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted contexts, which may allow an attacker to invoke unintended application logic.

Applications using AntPathMatcher in Spring Framework are vulnerable to ReDoS if an attacker can supply a pattern to match(), matchStart(), or extractUriTemplateVariables(). Affects Spring Framework 7.0.0-7.0.7, 6.2.0-6.2.18, 6.1.0-6.1.27, and 5.3.0-5.3.48.

Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects leaks sensitive information. The impact on data confidentiality is low, with no impact on integrity or availability.

Insufficient validation of untrusted input in the New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)