Microsoft - CVE CyberSecurity Database News (Page 8)

Apr 18, 2025 Microsoft Apache

CVE-2025-29953 - How Untrusted Data Deserialization in Apache ActiveMQ NMS OpenWire Client Puts You at Risk (And How to Fix It)

A major security flaw – CVE-2025-29953 – was found in Apache ActiveMQ NMS OpenWire Client that can let attackers run arbitrary code on your .NET systems. This

Apr 15, 2025 Windows Microsoft

CVE-2025-33028 - WinZip Mark-of-the-Web Bypass Exploit – What You Need to Know

In June 2024, a fresh vulnerability was discovered affecting one of the world’s most popular archiving tools, WinZip. The flaw, now tracked as CVE-2025-33028,

Apr 15, 2025 Microsoft

CVE-2025-29817 - Uncontrolled Search Path Element in Power Automate Exposes Sensitive Data

On June 7, 2024, Microsoft disclosed a security bug tracked as CVE-2025-29817, relating to “Uncontrolled Search Path Element” in the Power Automate desktop application. This

Apr 12, 2025 Microsoft Exploit

CVE-2025-29834 - Out-of-Bounds Read in Microsoft Edge (Chromium-Based) Lets Attackers Run Code Remotely

--- Summary: A critical vulnerability (CVE-2025-29834) has been discovered in the Microsoft Edge browser (Chromium-based), allowing remote attackers to execute arbitrary code by exploiting an

Apr 12, 2025 Windows Microsoft Exploit

CVE-2025-32726 - How Improper Access Control in Visual Studio Code Lets Local Attackers Escalate Privileges

A new vulnerability, identified as CVE-2025-32726, was recently discovered in Visual Studio Code (VS Code). This flaw allows a user with limited permissions on a