NVD disclosure day
CVE-2025-37164
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in HPE OneView allows for remote code execution, potentially impacting affected systems and leading to data compromise and service disruption.
CVE-2025-65319
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Blue Mail versions 1.140.103 and below have a vulnerability where attachments are saved without a Mark-of-the-Web tag, potentially bypassing Windows and other software protections. This could allow attackers to execute malicious files by tricking users into downloading attachments.
CVE-2025-65318
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Canary Mail's attachment handling can bypass Windows file protections by saving documents without a Mark-of-the-Web tag. This vulnerability could allow attackers to execute malicious files on a user's system if they interact with a specially crafted attachment. The potential for unauthorized data access or system compr