NVD disclosure day
CVE-2025-53619
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical out-of-bounds read vulnerability exists in Grassroots DICOM, potentially allowing attackers to leak information by providing a specially crafted DICOM file that triggers improper handling of image pixel data. This issue could expose sensitive memory contents if the vulnerable functionality is reached.
CVE-2025-53618
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An out-of-bounds read vulnerability in Grassroots DICOM's JPEGBITSCodec allows an attacker to provide a malicious DICOM file to trigger an information leak. This could potentially expose data if systems process specially crafted files, warranting confirmation of its use and exposure.
CVE-2025-48429
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An out-of-bounds read vulnerability in Grassroots DICOM's RLECodec component allows a malicious file to leak heap data. This could expose sensitive information from memory if the affected functionality is reachable. The reader should confirm if this library is used and assess its potential impact.
CVE-2025-65834
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Meltytech Shotcut is vulnerable to a buffer overflow due to memory access violations when processing MLT project files with manipulated width and height parameters. This can occur when the application attempts to allocate excessive memory, potentially leading to denial-of-service or arbitrary code execution. The risk i
CVE-2025-62864
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An out-of-bounds write vulnerability in AmpereOne devices can occur through a malformed SMC call to the UEFI-MM MMCommunicate service. This could allow an attacker to corrupt data within the UEFI-MM Secure Partition, potentially impacting system integrity and confidentiality.
CVE-2025-62863
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in AmpereOne firmware allows an improperly formed SMC call to the UEFI-MM PCIe driver, potentially causing an out-of-bounds write. This could impact device integrity and availability.
CVE-2025-50401
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Mercury D196G devices contain a critical buffer overflow vulnerability in their password handling function that can be exploited remotely without authentication. Successful exploitation could allow an attacker to gain unauthorized access and control over the device, potentially impacting its functionality and the broad
CVE-2025-50398
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical buffer overflow vulnerability exists in Mercury D196G firmware affecting the `fac_password` parameter, potentially allowing remote code execution by unauthenticated attackers. This could lead to device compromise and impact confidentiality, integrity, and availability. It is important to determine if this te
CVE-2025-37164
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in HPE OneView allows for remote code execution, potentially impacting affected systems and leading to data compromise and service disruption.
CVE-2025-68315
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's f2fs file system could allow for the detection of corrupted metadata, impacting system data integrity and potentially leading to allocation failures.
CVE-2025-68301
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network driver can cause a system crash when handling certain network packets. This is triggered by specially crafted traffic and affects specific network hardware, potentially leading to denial of service and impacting kernel stability.
CVE-2025-68285
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's libceph component, specifically within the `have_mon_and_osd_map()` function. This flaw can arise from a race condition during session establishment when the client rapidly receives new network maps, potentially leading to kernel memory corruption and system i
CVE-2025-68284
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's Ceph client could allow an attacker to cause out-of-bounds writes using specially crafted network packets. This could impact system data integrity and availability.
CVE-2025-65319
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Blue Mail versions 1.140.103 and below have a vulnerability where attachments are saved without a Mark-of-the-Web tag, potentially bypassing Windows and other software protections. This could allow attackers to execute malicious files by tricking users into downloading attachments.
CVE-2025-65318
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Canary Mail's attachment handling can bypass Windows file protections by saving documents without a Mark-of-the-Web tag. This vulnerability could allow attackers to execute malicious files on a user's system if they interact with a specially crafted attachment. The potential for unauthorized data access or system compr
CVE-2025-68263
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A use-after-free vulnerability in the Linux kernel's ksmbd component can be triggered by a race condition during message handling, potentially leading to system instability or data corruption. This issue stems from improper locking when handling network replies.
CVE-2025-68192
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's networking component may cause kernel panics when processing raw IP packets without proper MAC header initialization, potentially leading to system crashes. This issue can be triggered when IPsec is used over the `qmimux0` interface on ARM64 systems.
CVE-2025-40350
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network driver may cause incorrect packet data handling when XDP programs modify buffer layouts, potentially leading to kernel warnings or errors. This issue is internal to the driver's interaction with XDP programs and its relevance and exposure require confirmation.
CVE-2025-67744
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A security vulnerability in the DeepChat AI platform's diagram rendering component could allow attackers to execute arbitrary system commands. This flaw, arising from unsafe Mermaid configuration and an exposed IPC interface, enables cross-site scripting to escalate to remote code execution if a user views a crafted di