8.2
CVE-2025-4425 - SetupAutomationSmm: Stack overflow vulnerability in SMI handler
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β https://support.lenovo.com/us/en/product_security/home
6
CVE-2025-4424 - SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β https://support.lenovo.com/us/en/product_security/home
8.2
CVE-2025-4423 - SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead β¦
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β https://support.lenovo.com/us/en/product_security/home
8.2
CVE-2025-4422 - EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β https://support.lenovo.com/us/en/product_security/home
8.2
CVE-2025-4421 - EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM module
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β https://support.lenovo.com/us/en/product_security/home
5.1
CVE-2025-8217 - Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension
The Amazon Q Developer Visual Studio Code (VS Code) extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making β¦
7
CVE-2025-25011 - Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the β¦
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentβ¦
7
CVE-2025-0712 - APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when usingβ¦
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentβ¦
6.1
CVE-2024-45515 -
An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability exists in Zimbra webmail due to insufficient validation of the content type metadata when importing files into the briefcase. Attackers can exploit this issue by crafting a file with manipβ¦
7.8
CVE-2025-50777 -
The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credβ¦