CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Speech Runtime Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Authentication Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +15 more +17 moreWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability7.4 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +14 more +16 moreWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +15 more +17 moreWindows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreDesktop Window Manager Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Device Association Broker Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows USB Video Class System Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +15 more +17 moreWindows Remote Desktop Protocol Security Feature Bypass7.0 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +11 more +13 moreWindows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows BitLocker Security Feature Bypass Vulnerability6.1 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Cloud Files Mini Filter Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows NTFS Elevation of Privilege Vulnerability7.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows BitLocker Security Feature Bypass Vulnerability6.1 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Storage Management Provider Information Disclosure Vulnerability5.5 Medium
- microsoft configuration manager, configuration manager 2403, configuration manager 2409 +1 more +3 moreConfiguration Manager Elevation of Privilege Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Agere Modem Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows Agere Modem Driver Elevation of Privilege Vulnerability7.8 High
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability8.4 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Device Association Broker Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +10 more +12 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.4 High
- microsoft arc enabled servers - azure connected machine agent, azure connected machine agent +1 moreArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability7.0 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface4.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface4.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface4.9 Medium
- hewlett packard enterprise (hpe) arubaos (aos)Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable Boot6.0 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required)6.2 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface7.2 High
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Commands Connectors configuration configuration page6.8 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activ…7.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write7.2 High
- ibi webfocusibi WebFOCUS - Unauthenticated RCE Vulnerability9.3 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability6.5 Medium
- hewlett packard enterprise (hpe) arubaos (aos)Secure Boot Bypass allows for Compromise of Hardware Root of Trust7.1 High
- hewlett packard enterprise (hpe) arubaos (aos)Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution7.2 High
libndpTuxCare,libndp-develTuxCare +1 moreUpdate of libndpNo score- windsurfWindsurf Prompt Injection via Filename4.6 Medium
- hewlett packard enterprise (hpe) proliant rl300 gen11 serverA potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.6.0 Medium
- clevo notebook system firmwareClevo UEFI firmware exposed Boot Guard private keys, enabling potential abuse of the Boot Guard trust chain7.6 High
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the ACL Action access configuration page6.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the Hosts templates configuration page6.8 Medium
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreAn Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0...2.6 Low
- eladnava mailgenMailgen vulnerable to HTML injection and cross-site scripting via plaintext email generation2.9 Low
- fortinet fortios, fortiproxy +1 moreAn improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1...4.2 Medium
- fortinet forticlient, forticlientmac +1 moreAn Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS...6.8 Medium
- Show moreLoading…