Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Alert TWCERTCC-200-202511-00000012
- [CVE-2025-21042] Samsung Mobile Devices Out-of-Bounds Write Vulnerability (CVSS v3.1: 8.8)
[Exploited by Ransomware: Unknown] Samsung mobile devices have an Out-of-Bounds Write vulnerability in libimagecodec.quram.so. This vulnerability may allow a remote attacker to execute arbitrary code.
- [CVE-2025-12480] Gladinet Triofox Improper Access Control Vulnerability (CVSS v3.1: 9.1)
[Exploited by Ransomware: Unknown] Gladinet Triofox has an Improper Access Control vulnerability that allows access to the initial setup page even after configuration is complete.
- [CVE-2025-62215] Microsoft Windows Race Condition Vulnerability (CVSS v3.1: 7.0)
[Exploited by Ransomware: Unknown] Microsoft Windows kernel has a Race Condition vulnerability that allows a local attacker with low-level privileges to elevate privileges. Successful exploitation of this vulnerability may allow the attacker to gain SYSTEM-level access.
- [CVE-2025-9242] WatchGuard Firebox Out-of-Bounds Write Vulnerability (CVSS v3.1: 9.8)
[Exploited by Ransomware: Unknown] The iked process in the WatchGuard Firebox operating system has an Out-of-Bounds Write vulnerability, which may allow an unauthenticated remote attacker to execute arbitrary code.
- [CVE-2025-64446] Fortinet FortiWeb Path Traversal Vulnerability (CVSS v3.1: 9.8)
[Exploited by Ransomware: Unknown] Fortinet FortiWeb has a Path Traversal vulnerability, which may allow an unauthenticated attacker to execute administrative commands on the system through specially crafted HTTP or HTTPS requests.