Microsoft - CVE CyberSecurity Database News (Page 3)

Apr 27, 2025 Windows Microsoft API Exploit

CVE-2025-46579 - DDE Injection Vulnerability in GoldenDB – How Hackers Can Sneak in Commands

GoldenDB is a well-known database product that’s widely used in financial and commercial sectors. Recently, security researchers have identified a serious vulnerability—CVE-2025-46579—that

Apr 18, 2025 Microsoft Apache

CVE-2025-29953 - How Untrusted Data Deserialization in Apache ActiveMQ NMS OpenWire Client Puts You at Risk (And How to Fix It)

A major security flaw – CVE-2025-29953 – was found in Apache ActiveMQ NMS OpenWire Client that can let attackers run arbitrary code on your .NET systems. This

Apr 15, 2025 Windows Microsoft

CVE-2025-33028 - WinZip Mark-of-the-Web Bypass Exploit – What You Need to Know

In June 2024, a fresh vulnerability was discovered affecting one of the world’s most popular archiving tools, WinZip. The flaw, now tracked as CVE-2025-33028,

Apr 15, 2025 Microsoft

CVE-2025-29817 - Uncontrolled Search Path Element in Power Automate Exposes Sensitive Data

On June 7, 2024, Microsoft disclosed a security bug tracked as CVE-2025-29817, relating to “Uncontrolled Search Path Element” in the Power Automate desktop application. This

Apr 12, 2025 Microsoft Exploit

CVE-2025-29834 - Out-of-Bounds Read in Microsoft Edge (Chromium-Based) Lets Attackers Run Code Remotely

--- Summary: A critical vulnerability (CVE-2025-29834) has been discovered in the Microsoft Edge browser (Chromium-based), allowing remote attackers to execute arbitrary code by exploiting an